CVE-2022-24424
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-24424
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
DELL EMC AppSync 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DELL EMC AppSync是美国戴尔（DELL）公司的一个复制数据管理软件。提供一种由 SLA 驱动的简单自助服务方式来保护、恢复和克隆关键的Microsoft 与 Oracle 应用程序以及 VMware 环境。 DELL EMC AppSync 存在路径遍历漏洞，远程未经身份验证的攻击者可能会利用此漏洞获得对存储在服务器文件系统上的文件的未经授权的读取访问权限，并具有正在运行的 Web 应用程序的权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-24424
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-24424
请登录查看更多情报信息。
- https://www.dell.com/support/kbdoc/000197433x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-24424
Same Patch Batch · Dell · 2022-04-21 · 4 CVEs total
| CVE-2022-26856 | 8.2 HIGH | DELL EMC Repository Manager 安全漏洞 |
| CVE-2022-22558 | 5.7 MEDIUM | Dell PowerEdge Server BIOS 缓冲区错误漏洞 |
| CVE-2022-24423 | 5.3 MEDIUM | Dell iDRAC8 输入验证错误漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-22
- CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path t - CVE-2022-50956
WordPress Plugin amministrazione-aperta 3.7.3 Local File Rea - CVE-2026-8215
Industrial Application Software IAS Canias ERP RMI iasReques - CVE-2026-42605
AzuraCast: Path Traversal in `currentDirectory` Parameter En - CVE-2026-42574
apko dirFS has a symlink-following path traversal that allow
V. Comments for CVE-2022-24424
No comments yet