Improper Certificate Validation in Dell EMC Unisphere for PowerMax
CVE-2020-5367

8.1HIGH

Key Information:

Vendor

Dell
Status
Unisphere For Powermax, Unisphere For Powermax Virtual Appliance, Powermax Os
Vendor
CVE Published:
23 June 2020

What is CVE-2020-5367?

Dell EMC Unisphere for PowerMax and its associated virtual appliance suffer from an improper certificate validation issue. This vulnerability allows unauthenticated remote attackers to potentially perform man-in-the-middle attacks by supplying crafted certificates. Such exploitation enables attackers to intercept and manipulate traffic, compromising the confidentiality and integrity of sensitive data in transit.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Unisphere for PowerMax, Unisphere for PowerMax Virtual Appliance, PowerMax OS 9.1.0.17

Unisphere for PowerMax, Unisphere for PowerMax Virtual Appliance, PowerMax OS 5978

References

https://www.dell.com/support/kbdoc/en-uk/000153935/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.