Описание
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
EPSS
9.8 Critical
CVSS3
9.1 Critical
CVSS3
Дефекты
Связанные уязвимости
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Уязвимость программного средства защиты данных Cyber Recovery, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ к API-интерфейсу
EPSS
9.8 Critical
CVSS3
9.1 Critical
CVSS3