Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-5377

Опубликовано: 28 июл. 2020
Источник: nvd
CVSS3: 9.1
CVSS2: 6.4
EPSS Высокий

Описание

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:emc_openmanage_server_administrator:*:*:*:*:*:*:*:*
Версия до 9.4 (включая)

EPSS

Процентиль: 99%
0.79171
Высокий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22
CWE-22

Связанные уязвимости

github
больше 3 лет назад

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

EPSS

Процентиль: 99%
0.79171
Высокий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22
CWE-22