Ga naar hoofdinhoud
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen

DSA-2024-276: Security Update for Dell Data Protection Central for Multiple Third-Party Component Vulnerabilities.

Samenvatting: Dell Data Protection Central remediation is available for multiple third-party vulnerabilities that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op   Dit artikel is niet van toepassing op 

Impact

Critical

Gegevens

Third-party Component CVEs Addressed More Information
Keycloak
 
CVE-2022-1471, CVE-2022-45047, CVE-2022-42004, CVE-2022-42003, CVE-2022-3143, CVE-2023-24815, CVE-2023-0044, CVE-2022-41915, CVE-2022-41881, CVE-2023-21930, CVE-2023-4853, CVE-2023-2976, CVE-2023-5072 See NVD for individual scores for each CVE:
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
Postgres CVE-2023-0464, CVE-2023-0401, CVE-2023-0217, CVE-2023-0216, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304, CVE-2022-4203, CVE-2023-39417, CVE-2023-29491, CVE-2023-2454, CVE-2023-29469, CVE-2023-28484, CVE-2023-2650, CVE-2023-1255, CVE-2023-2455, CVE-2023-3817, CVE-2023-3446, CVE-2023-2975 , CVE-2023-0466 , CVE-2023-0465, CVE-2022-1304 See NVD for individual scores for each CVE:
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
Iam CVE-2023-34062, CVE-2024-22243, CVE-2024-28085, CVE-2024-22257, CVE-2024-22259, CVE-2024-28182, CVE-2024-26461, CVE-2024-26458 See NVD for individual scores for each CVE:
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
Apache Tomcat CVE-2023-46589 https://nvd.nist.gov/vuln/detail/CVE-2023-46589 This hyperlink is taking you to a website outside of Dell Technologies.
Reactor Netty CVE-2023-34054 https://nvd.nist.gov/vuln/detail/CVE-2023-34054 This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Software/Firmware Affected Versions Remediated Versions Link
Dell Data Protection Central Data Protection Central OS Update (SUSE SLES 12 SP5) Version 19.10.0-4 and prior Version 19.11.0-2 Data Protection Central 19.11
Product Software/Firmware Affected Versions Remediated Versions Link
Dell Data Protection Central Data Protection Central OS Update (SUSE SLES 12 SP5) Version 19.10.0-4 and prior Version 19.11.0-2 Data Protection Central 19.11
IDPA 2.7.6 and prior versions are impacted. Fix will be available in the upcoming IDPA release.

Platform: SUSE Linux Enterprise Server 12 SP5
See the latest ‘Dell Data Protection Central 19.11 Release Notes’ in  Dell Data Protection Central 19.11 Release Notes | Dell US



Revisiegeschiedenis

RevisionDateDescription
1.02024-07-02Initial Release

Verwante informatie

Getroffen producten

Data Protection Central, Data Protection Central