File Permission Vulnerability in Dell EMC PowerStore
CVE-2020-29503

4.1MEDIUM

Key Information:

Vendor
Dell
Status
Powerstore
Vendor
CVE Published:
19 July 2021

Summary

Dell EMC PowerStore versions prior to 1.0.3.0.5.xxx are susceptible to a file permission vulnerability that could be exploited by a locally authenticated attacker. This exploitation may lead to unauthorized information disclosure, allowing access to sensitive system directories. Organizations using impacted versions should promptly update their systems to mitigate this issue and enhance their overall security posture.

Affected Version(s)

PowerStore < unspecified

References

https://www.dell.com/support/kbdoc/000180775
x_refsource_MISC

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.