Vulnerability Description
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Unity Operating Environment | < 5.0.0.0.5.116 |
| Dell | Emc Unityvsa Operating Environment | < 5.0.0.0.5.116 |
References
- https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/detaiBroken LinkVendor Advisory
- https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/detaiBroken LinkVendor Advisory
FAQ
What is CVE-2019-3734?
CVE-2019-3734 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentia...
How severe is CVE-2019-3734?
CVE-2019-3734 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3734?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Unity Operating Environment, Dell Emc Unityvsa Operating Environment.