Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-592w-856w-97c3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

EPSS

Процентиль: 34%
0.00138
Низкий

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

EPSS

Процентиль: 34%
0.00138
Низкий

Дефекты

CWE-345