DSA-2023-019: Dell Cloud Mobility Security Update for Certificate Revocation Vulnerability
Samenvatting: Dell Cloud Mobility remediation is available for certificate revocation vulnerability that may be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-23690 | Cloud Mobility for Dell Storage versions 1.3.0.X and earlier contain an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker may perform a man-in-the-middle attack and eavesdrop on encrypted communications from Cloud Mobility to Cloud Storage devices. Exploitation may lead to the compromise of secret and sensitive information, cloud storage connection downtime, and the integrity of the connection to the Cloud devices. | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-23690 | Cloud Mobility for Dell Storage versions 1.3.0.X and earlier contain an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker may perform a man-in-the-middle attack and eavesdrop on encrypted communications from Cloud Mobility to Cloud Storage devices. Exploitation may lead to the compromise of secret and sensitive information, cloud storage connection downtime, and the integrity of the connection to the Cloud devices. | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L |
Getroffen producten en herstel
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-23690 | Cloud Mobility for Dell Storage | Versions 1.3.3.X and earlier | 1.3.4.0 | AWS: https://aws.amazon.com/marketplace/pp/prodview-puxtams7ngwwk VMware: https://marketplace.cloud.vmware.com/services/details/cloud-mobility-for-dell-emc-storage-1-1-1-1-1?slug=true |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-23690 | Cloud Mobility for Dell Storage | Versions 1.3.3.X and earlier | 1.3.4.0 | AWS: https://aws.amazon.com/marketplace/pp/prodview-puxtams7ngwwk VMware: https://marketplace.cloud.vmware.com/services/details/cloud-mobility-for-dell-emc-storage-1-1-1-1-1?slug=true |
NOTE: Customers should only use the latest versions of Cloud Mobility for Dell Storage on the AWS or VMware Marketplaces. We recommend downloading the newest versions of Cloud Mobility for Dell Storage to obtain a fix for this issue.
Revisiegeschiedenis
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-01-17 | Initial Release |
| 2.0 | 2023-07-10 | Updated for enhanced presentation with not change to content |
Verwante informatie
Juridische verklaring van afstand
Artikeleigenschappen
Artikelnummer: 000207521
Artikeltype: Dell Security Advisory
Laatst aangepast: 10 jul. 2023
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.