CVE-2019-3720

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthorized access to the file system by exploiting insufficient sanitization of input parameters.

Score

CVSS 3.1 4.9 Medium

Status

Modified - security_alert@emc.com

Published

2019-04-25

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Emc Openmanage Server Administrator (Dell)
• Open Manage System Administrator (Dell Emc)

References

• http://www.securityfocus.com/bid/108092
• https://www.dell.com/support/article/us/en/04/sln316915/dsa-2019-060-dell-emc-open-manage-system-administrator-multiple…