Vulnerability in Dell Emc_unisphere_for_powermax
CVE-2020-5367
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthentic…
Vulnerability class: Improper Certificate Validation
EPSS: 0.006 (44.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dell Emc_unisphere_for_powermax
- Dell Emc_unisphere_for_powermax_virtual_appliance
- Dell Powermax_os — versions 5978
- Dell Unisphere For Powermax, Powermax Virtual Appliance, Os — versions 9.1.0.17, 5978
Weakness classification (CWE)
References
- security_alert@emc.com (vendor-advisory)
Frequently asked questions
- What is CVE-2020-5367?
- CVE-2020-5367 is a high-severity vulnerability in Dell Emc_unisphere_for_powermax, classified under Improper Certificate Validation. CVSS score: 7.4/10. Published 2020-06-23.
- How severe is CVE-2020-5367?
- High severity. CVSS v3 base score is 7.4 out of 10.