Описание
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users.
Ссылки
- Broken LinkVendor Advisory
- Broken LinkVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.0.0.0.5.116 (исключая)Версия до 5.0.0.0.5.116 (исключая)
Одно из
cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_unityvsa_operating_environment:*:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00129
Низкий
5.4 Medium
CVSS3
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users.
EPSS
Процентиль: 33%
0.00129
Низкий
5.4 Medium
CVSS3
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-noinfo