Lucene search

PRIOn knowledge basePRION:CVE-2022-34381

HistoryFeb 02, 2024 - 4:15 p.m.

Design/Logic Flaw

2024-02-0216:15:00

PRIOn knowledge base

www.prio-n.com

dell bsafe

ssl-j

crypto-j

critical vulnerability

third-party component

remote attacker

compromise

upgrade

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.5%

JSON

Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted system. This is a Critical vulnerability and Dell recommends customers to upgrade at the earliest opportunity.

CPENameOperatorVersion
bsafe_crypto-jlt6.2.6.1
bsafe_ssl-jeq7.0
bsafe_ssl-jlt6.5

Name	Operator	Version
bsafe_crypto-j	lt	6.2.6.1
bsafe_ssl-j	eq	7.0
bsafe_ssl-j	lt	6.5

References

www.dell.com/support/kbdoc/en-us/000203278/dsa-2022-208-dell-bsafe-ssl-j-6-5-and-7-1-and-dell-bsafe-crypto-j-6-2-6-1-and-7-0-security-vulnerability