CVE-2022-34453CWE-284

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability

High · published August 3, 2023

CVSS v3.1
7.6
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-08-03T12:50Z
EPSS history
Timeline
  • 03 AUG 12:50Z
    Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability
    cvelistv5