CVE-2025-43995 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote acc…
Critical CVSS: 9.8

CVE-2025-43995

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.
Vendor
Dell
Product
Storage Manager
CWE
CWE-287
Yayın Tarihi
2025-10-24 15:15:38
Güncelleme
2025-11-04 14:43:05
Source Identifier
security_alert@emc.com
KEV Date Added
-

Kategoriler

Referanslar