CVE-2019-3723
moderate-risk
Published 2019-06-06
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation
Do I need to act?
-
0.42% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10
Critical
NETWORK
/ LOW complexity
Affected Products (6)
Affected Vendors
References (4)
Third Party Advisory
http://www.securityfocus.com/bid/108685
Third Party Advisory
http://www.securityfocus.com/bid/108685
46
/ 100
moderate-risk
Severity
31/34 · Critical
Exploitability
2/34 · Minimal
Exposure
13/34 · Low