CVE-2019-3723
Web Parameter Tampering Vulnerability
- State
- Published
- Severity
- 9.1 Critical
- Published
- Jun 6, 2019
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2019
Description
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 9.1 Critical | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | dell |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
OpenManage Server AdministratorDell EMC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.