Product:
Disk Library for Mainframe
Summary
Dell Disk Library for Mainframe contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to server-side request forgery. This could allow unauthorized actions to be performed on behalf of the server.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-23773 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can craft specific requests that manipulate the server into making unintended requests to internal resources. By leveraging this SSRF vulnerability, the attacker can potentially access sensitive information or perform actions that should be restricted.
Affected Products
- DLm 8700: Affected by SSRF vulnerability allowing unauthorized requests.
- DLm 2700: Similar vulnerability as DLm 8700, enabling potential exploitation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Additionally, restricting network access and implementing proper input validation can help reduce the risk of exploitation.