Описание
Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2 (исключая)Версия до 1.10.00 (исключая)
Одно из
cpe:2.3:a:dell:emc_openmanage_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_openmanage_enterprise-modular:*:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00429
Низкий
7.6 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-20
CWE-20
Связанные уязвимости
github
больше 3 лет назад
Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.
EPSS
Процентиль: 62%
0.00429
Низкий
7.6 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-20
CWE-20