| Package | Affected versions | Patched versions |
|---|---|---|
| powerflex presentation server | ≥ 3.5, < 3.6 | 3.6 |
Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free