CVE-2022-34372: Dell Powerprotect Cyber Recovery

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality

Affected products

• Dell Powerprotect Cyber Recovery: before 19.11.0.2 (fixed in 19.11.0.2)

Published 2022-09-01. Last modified 2026-06-17.