CVE-2022-34372: Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially…

PriorityP265critical9.1CVSS 3.1

AVNACLPRNUINSUCHIHAN

EPSS

1.03%

59.4th percentile

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	cyber_recovery	>= unspecified < 19.11	19.11
dell	powerprotect_cyber_recovery	< 19.11.0.2	19.11.0.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.