Directory Traversal Vulnerability
CVE-2019-3720

4.9MEDIUM

Key Information:

Vendor
Dell
Status
Open Manage System Administrator
Vendor
CVE Published:
25 April 2019

Summary

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthorized access to the file system by exploiting insufficient sanitization of input parameters.

Affected Version(s)

Open Manage System Administrator 9.3

References

https://www.dell.com/support/article/us/en/04/sln316915/d...
x_refsource_MISC
http://www.securityfocus.com/bid/108092
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell EMC would like to thank Harrison Neal for reporting this issue.
.