What is CVE-2020-5389?

CVE-2020-5389 is a medium-severity vulnerability in Dell Emc Openmanage Integration For Microsoft System Center, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2020-10-08.

How severe is CVE-2020-5389?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Dell Emc Openmanage Integration For Microsoft System Center

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Dell Emc_openmanage_integration_for_microsoft_system_center
Dell Omimssc (Openmanage Integration For Microsoft System Center) — versions unspecified

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5389?: CVE-2020-5389 is a medium-severity vulnerability in Dell Emc Openmanage Integration For Microsoft System Center, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2020-10-08.
How severe is CVE-2020-5389?: Medium severity. CVSS v3 base score is 6.5 out of 10.