Auth bypass in Dell Emc_unisphere_for_powermax
CVE-2020-5345
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an authorization bypass vulnerability. An authenticated maliciou…
EPSS: 0.007 (50.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L.
Affected products
- Dell Emc_unisphere_for_powermax
- Dell Emc_unisphere_for_powermax_virtual_appliance
- Dell Powermax_os — versions 5978
- Dell Unisphere For Powermax — versions unspecified
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5345?
- CVE-2020-5345 is a medium-severity vulnerability in Dell Emc_unisphere_for_powermax, classified under CWE-602. CVSS score: 6.4/10. Published 2020-06-23.
- How severe is CVE-2020-5345?
- Medium severity. CVSS v3 base score is 6.4 out of 10.