CVE-2020-5321

Published: Jul 19, 2021Modified: Nov 21, 2024

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H

Exploitability: 2.3 / Impact: 4.7

Source: NVD

Description

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.

Affected (2)

Products: Dell: Emc Openmanage Enterprise, Emc Openmanage Enterprise Modular

2 products

Emc Openmanage Enterprise

Emc Openmanage Enterprise Modular

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Openmanage Enterprise	Before 3.2
Dell Emc Openmanage Enterprise Modular	Before 1.10.00

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.