CVE-2022-22551
CVE-2022-22551
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Produtos afetados
Dell · AppSyncQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://www.dell.com/support/kbdoc/000195377