writeups.xyz / Multiple vulnerabilities in Dell Unisphere for PowerMax vApp, VASA Provider vApp and Solutions Enabler vApp CVE-2022-45103 / CVE-2022-45104

Submitter : c2a

Date: 21 February 2023

Bounty : undisclosed

Vulnerabilities :

• Parameter Injection
• Arbitrary File Read
• RCE

Programs :

• Dell

Authors :

• Antoine Carrincazeaux

Link :
https://www.synacktiv.com/sites/default/files/2023-02/Synacktiv-Security_Advisory-Dell_EMC_vApp_Manager-Multiple_Vulnerabilities.pdf