CVE-2022-24414

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-598 CWE-200

Affected software

No affected versions have been published.

Timeline

Published: May 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-244157.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244167.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244176.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244186.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244197.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-24427.2The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via the 'path' parameter CVE-2022-244207.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244217.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-244229.8Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticate CVE-2022-244237.5Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially expl CVE-2022-244247.5Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may po CVE-2022-244267.8Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced D