CVE-2019-1118 Dell PowerVault MD 13.0 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.

Overview of CVE-2022-31239

CVE-2019-1118 is a vulnerability in Dell PowerVault MD 13.0 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13.5 and earlier, versions 13.7 and earlier, versions 13 of the PowerVault MD Storage Manager that may allow local attackers to perform unauthorized actions on the system by exploiting a flaw in how input validation is performed on user-supplied input data provided by administrators with certain privileges when creating a user account in the backend workstation interface of the application

Dell PowerVault MD - Management, Deployment and Servicing

Dell PowerVault MD is a software product that provides administrative, deployment, and servicing functions for Dell PowerVault storage systems.
Dell PowerVault MD is the latest release of Dell's management software for the industry-leading Dell PowerVault family of Storage Systems. The new release continues to provide customers with more flexible and comprehensive tools to manage their storage infrastructure.

Vulnerability overview

CVE-2022-31239: A vulnerability in Dell PowerVault MD 13.0, 13.5, 13.7, and earlier versions allows an unauthenticated user with access to the web interface to read, insert, modify, or delete files on a vulnerable system.
Dell PowerVault MD is a storage management product that runs on Linux and Solaris operating systems from Dell Inc.
This vulnerability allows an unauthenticated user with access to the web interface to read, insert, modify, or delete files on a vulnerable system by modifying the settings of the file repository service which affects other services running on the same machine.

Timeline

Published on: 10/21/2022 18:15:00 UTC
Last modified on: 10/24/2022 15:40:00 UTC

References