Read the docs
TI-2023-26516 Aliases CVE-2023-48671GHSA-q3cc-722m-mfc6

Information disclosure in Dell vApp Manager

Priority LOW 34CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability leading to obtain sensitive information that may aid in further attacks.

Why it matters now

EPSS 0.00762 55th percentileScored 2026-11-07
Fix Fixed vApp Manager (Dell): 9.2.4.x

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellvApp Managerbefore 9.2.4.x9.2.4.xPatch availableCNA
  • vApp Manager VendorDell Affected before 9.2.4.x Fixed in 9.2.4.x Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*before 9.2.4.5VulnerableDell
cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*before 9.2.4.7VulnerableDell
cpe:2.3:o:dell:powermax_os:5978:*:*:*:eem:*:*:*5978VulnerableDell
  • cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:* Versions before 9.2.4.5 Vulnerable ·Dell
  • cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:* Versions before 9.2.4.7 Vulnerable ·Dell
  • cpe:2.3:o:dell:powermax_os:5978:*:*:*:eem:*:*:* Versions 5978 Vulnerable ·Dell

Remediation

  • Fix · CNA vApp Manager (Dell) Fixed in 9.2.4.x

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Dell vApp Manager — dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-po…

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2023-26510 OS command injection in Dell vApp ManagerPriority LOW 37
    • TI-2023-26511 OS command injection in Dell vApp ManagerPriority LOW 35
    • TI-2023-26509 OS command injection in Dell vApp ManagerPriority LOW 35
    Show all 5 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-48671
  2. 2026-10-03 Alias added: GHSA-q3cc-722m-mfc6

References

Patch 1

  • TI-2023-26510 OS command injection in Dell vApp Manager CVSS 3.1HIGH 7.2
  • TI-2021-04616 Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass… CVSS 3.1HIGH 8.1
  • TI-2020-04418 Improper certificate validation in Dell Unisphere for PowerMax, Unisphere for PowerMax… CVSS 3.1HIGH 8.1
  • TI-2023-26512 OS command injection in Dell vApp Manager, CVSS 3.1HIGH 7.2
  • TI-2023-26511 OS command injection in Dell vApp Manager CVSS 3.1HIGH 7.2
  • TI-2023-26509 OS command injection in Dell vApp Manager CVSS 3.1HIGH 7.2
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences