CVE:CVE-2022-45103
CNNVD:CNNVD-202301-391
Dell EMC Unisphere for PowerMax是美国戴尔（Dell）公司的一套针对PowerMax存储阵列的图形化管理工具。
Dell EMC Unisphere for PowerMax vApp、VASA Provider vApp和Solutions Enabler vApp 9.2.3.x版本存在安全漏洞，该漏洞源于在下载日志功能中包含不正确的输入验证，可能会导致经过身份验证的用户读取底层文件系统上的任意文件。
solution:Upgrade dell emc_solutions_enabler_virtual_appliance to a higher version than 9.2.3.6,and avoid the version (,9.2.3.6); Upgrade dell emc_unisphere_for_powermax to a higher version than 9.2.3.22,10.0.0.5,and avoid the version (,9.2.3.22),[10.0.0.0,10.0.0.5); Upgrade dell emc_unisphere_for_powermax_virtual_appliance to a higher version than 9.2.3.22,and avoid the version (,9.2.3.22); Upgrade dell emc_vasa_provider_virtual_appliance to a higher version than 9.2.4.15,and avoid the version (,9.2.4.15); Upgrade dell solutions_enabler to a higher version than 9.2.3.6,10.0.0.5,and avoid the version (,9.2.3.6),[10.0.0.0,10.0.0.5); Upgrade dell unisphere_360 to a higher version than 9.2.3.12,and avoid the version (,9.2.3.12); Upgrade dell vasa_provider to a higher version than 9.2.4.22,and avoid the version (,9.2.4.22); Upgrade dell powermax_os to a higher version than -,5978,and avoid the version 5978