{"id":"CVE-2022-34397","aliases":["EUVD-2022-37352","GHSA-qcx4-x6q7-8hc3"],"status":"published","title":"Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5...","description":"Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.","severity":{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0023,"percentile":0.13946,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2023-02-13T09:06:03Z","modified":"2026-06-17T04:50:14Z","products":[{"vendor":"dell","product":"evasa_provider_virtual_appliance"},{"vendor":"dell","product":"solutions_enabler_virtual_appliance"},{"vendor":"dell","product":"unisphere for powermax"},{"vendor":"dell","product":"unisphere_for_powermax_virtual_appliance"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34397"},{"url":"https://github.com/advisories/GHSA-qcx4-x6q7-8hc3"}],"sources":{"cve":[{"id":"CVE-2022-34397","description":"\nDell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.\n\n","status":"published","published":"2023-02-13T09:06:03.573Z","modified":"2025-03-21T14:49:28.192Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:34:42.028422Z"}],"euvd":[{"id":"EUVD-2022-37352","description":"\nDell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.\n\n","status":"published","published":"2023-02-13T09:06:03Z","modified":"2025-03-21T14:49:28Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:56.049523Z"}],"ghsa":[{"id":"GHSA-qcx4-x6q7-8hc3","title":"Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5...","description":"Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.","status":"published","published":"2023-02-13T12:30:25Z","modified":"2023-03-04T05:08:12Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:54:16.14777Z"}],"nvd":[{"id":"CVE-2022-34397","description":"\nDell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.\n\n","status":"published","published":"2023-02-13T10:15:13.47Z","modified":"2026-06-17T04:50:14.337Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}