What is CVE-2019-3720?

CVE-2019-3720 is a medium-severity vulnerability in Dell Emc_openmanage_server_administrator, classified under Path Traversal. CVSS score: 4.9/10. Published 2019-04-25.

How severe is CVE-2019-3720?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Path Traversal in Dell Emc_openmanage_server_administrator

CVE-2019-3720

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthor…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.035 (87.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Dell Emc_openmanage_server_administrator
Dell Emc Open Manage System Administrator — versions 9.3

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3720?: CVE-2019-3720 is a medium-severity vulnerability in Dell Emc_openmanage_server_administrator, classified under Path Traversal. CVSS score: 4.9/10. Published 2019-04-25.
How severe is CVE-2019-3720?: Medium severity. CVSS v3 base score is 4.9 out of 10.