9.8
Critique
CVE-2022-34372 Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability
Description
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cyber Recovery 19.11 | premières → < 19.11 | 19.11 |
Autres CVE de Cyber Recovery
Les 6 CVE de Cyber Recovery →
CVE-2026-79938
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability
7.6
Élevée
CVE-2026-79939
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following…
5.8
Moyenne
CVE-2026-49809
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used…
6.5
Moyenne
CVE-2022-32481
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual…
7.8
Élevée