PT-2020-18449 · Dell Emc · Dell Emc Openmanage Integration For Microsoft System Center

Published 2020-10-08 · Updated 2020-10-19 · CVE-2020-5389

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1

Description The issue allows authenticated low privileged OMIMSCC users to potentially retrieve sensitive information from the logs. This is an information disclosure vulnerability.

Recommendations For versions prior to 7.2.1, update to version 7.2.1 or later to resolve the issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2020-5389

Affected Products

Dell Emc Openmanage Integration For Microsoft System Center

References · 4

• https://dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5389 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5389 · Vendor Advisory
• https://t.me/cibsecurity/15152 · Telegram Post