CVE-2022-34381: Dell BSAFE Crypto-J, верига на доставки

Описание

Оригинално описание

Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted system. This is a Critical vulnerability and Dell recommends customers to upgrade at the earliest opportunity.

Засегнати продукти

• Dell Dell BSAFE Crypto-J: преди 6.2.6.1
• Dell Dell BSAFE SSL-J: 7.0; преди 6.5

Вид слабост

• CWE-1329 Reliance on Component That is Not Updateable

История

Други уязвимости в Dell Dell BSAFE Crypto-J

• 5.9CVE-2024-29172
• 5.9CVE-2024-29171
• 4.4CVE-2023-28077
• 5.9CVE-2022-24409

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-34381
• https://nvd.nist.gov/vuln/detail/CVE-2022-34381
• https://www.dell.com/support/kbdoc/en-us/000203278/dsa-2022-208-dell-bsafe-ssl-j-6-5-and-7-1-and-dell-bsafe-crypto-j-6-2-6-1-and-7-0-security-vulnerability