Vulnerability Description
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Openmanage Server Administrator | 9.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/108685Third Party Advisory
- https://www.dell.com/support/article/us/en/04/sln317441/dsa-2019-074-dell-emc-opVendor Advisory
- http://www.securityfocus.com/bid/108685Third Party Advisory
- https://www.dell.com/support/article/us/en/04/sln317441/dsa-2019-074-dell-emc-opVendor Advisory
FAQ
What is CVE-2019-3723?
CVE-2019-3723 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially mani...
How severe is CVE-2019-3723?
CVE-2019-3723 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-3723?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Openmanage Server Administrator.