Описание
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
Уязвимые конфигурации
Конфигурация 1Версия до 19.22 (исключая)
cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00047
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-940
Связанные уязвимости
CVSS3: 4.7
github
около 1 месяца назад
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
EPSS
Процентиль: 15%
0.00047
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-940