PT-2019-16665 · Dell Emc · Dell Emc Openmanage System Administrator

Harrison Neal · Publicado 2019-04-25 · Atualizado 2023-02-10 · CVE-2019-3720

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0

Description The issue is related to a Directory Traversal Vulnerability due to insufficient sanitization of input parameters. A remote authenticated malicious user with admin privileges could potentially exploit this to gain unauthorized access to the file system.

Recommendations For versions prior to 9.3.0, update to version 9.3.0 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-3720

Produtos afetados

Dell Emc Openmanage System Administrator

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3720 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3720 · Aviso do Fabricante
• http://securityfocus.com/bid/108092 · Nota
• https://dell.com/support/article/us/en/04/sln316915/dsa-2019-060-dell-emc-open-manage-system-administrator-multiple-vulnerabilities?lang=en · Aviso do Fabricante