Emc Appsync vulnerabilities

3 known vulnerabilities in Emc Appsync from Dell. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  AppSync: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-24424Apr 21, 2022DellEPSS 1.69%

  Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with

• 9.8 Critical severity

  AppSync: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-22553Jan 21, 2022DellEPSS 1.11%

  Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to passwor

• 8.8 High severity

  AppSync: Session Fixation

  CVE-2022-22551Jan 21, 2022Dell

  DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.