← Database

CVE-2022-34372

CRITICAL CVSS: 9.8 Published: 2022-09-01 Modified: 2026-06-17

Description

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality

Affected Platforms

Dell Powerprotect Cyber Recovery

Weakness Type

CWE-288, CWE-287

References