PT-2019-16663 · Dell · Dell Supportassist Client

John C. Hennessy-Recar · Publicado 2019-04-18 · Atualizado 2023-02-10 · CVE-2019-3718

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SupportAssist Client versions prior to 3.2.0.90

Description The issue concerns an improper origin validation, which could be exploited by an unauthenticated remote attacker to attempt CSRF attacks on users of the impacted systems.

Recommendations For versions prior to 3.2.0.90, update to version 3.2.0.90 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-3718

Produtos afetados

Dell Supportassist Client

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3718 · Nota de Segurança
• https://dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3718 · Aviso do Fabricante
• http://securityfocus.com/bid/108020 · Nota