| Package | Affected versions | Patched versions |
|---|---|---|
| solutions enabler | ≥ 9.2.0.0, < 9.2.3.0< 9.1.0.18 | 9.2.3.09.1.0.18 |
| solutions enabler virtual appliance | ≥ 9.2.0.0, < 9.2.3.0< 9.1.0.18 | 9.2.3.09.1.0.18 |
| unisphere 360 | ≥ 9.2.0.0, < 9.2.3.3< 9.1.0.29 | 9.2.3.39.1.0.29 |
| unisphere for powermax | ≥ 9.2.0.0, < 9.2.3.4< 9.1.0.31 | 9.2.3.49.1.0.31 |
| unisphere for powermax virtual appliance | ≥ 9.2.0.0, < 9.2.3.4< 9.1.0.31 | 9.2.3.49.1.0.31 |
| vasa | ≥ 9.2.0.0, < 9.2.3.0< 9.1.0.723 | 9.2.3.09.1.0.723 |
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free