by Kastro
Paper/Archive/CVE-2020-5389

CVE-2020-5389

Dell OMIMSSC (OpenManage Integration for Microsoft System Center) — Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information d…

EPSS 0.9%CVSS 9.0
critical.is priorityof 100
39
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 61.1.611 × 2012.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.

Affected

ProductAffectedFixed inSource
OMIMSSC (OpenManage Integration for Microsoft System Center)unspecified – < 7.2.1 A017.2.1 A01CNA

Scores by source

dell (CNA)9.0CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refdell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en