CVE-2019-3723: Web Parameter Tampering Vulnerability
First published: Thu Jun 06 2019(Updated: )
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC OpenManage Server Administrator | =9.1 | |
| Dell EMC OpenManage Server Administrator | =9.1.0.1 | |
| Dell EMC OpenManage Server Administrator | =9.1.0.2 | |
| Dell EMC OpenManage Server Administrator | =9.2 | |
| Dell EMC OpenManage Server Administrator | =9.2.0.1 | |
| Dell EMC OpenManage Server Administrator | =9.2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Dell EMC OpenManage Server Administrator vulnerability?
The vulnerability ID for this Dell EMC OpenManage Server Administrator vulnerability is CVE-2019-3723.
What is the severity rating of the CVE-2019-3723 vulnerability?
The severity rating of the CVE-2019-3723 vulnerability is critical (9.1).
What is the affected software version range for the CVE-2019-3723 vulnerability?
The affected software version range for the CVE-2019-3723 vulnerability is versions prior to 9.1.0.3 and prior to 9.2.0.4 of Dell EMC OpenManage Server Administrator (OMSA).
What is the impact of the CVE-2019-3723 vulnerability?
The impact of the CVE-2019-3723 vulnerability is that a remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete files.
How can I fix the CVE-2019-3723 vulnerability?
To fix the CVE-2019-3723 vulnerability, it is recommended to update Dell EMC OpenManage Server Administrator to version 9.1.0.3 or version 9.2.0.4 or later.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/title
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/dell
- canonical/dell emc openmanage server administrator
- version/dell emc openmanage server administrator/9.1
- version/dell emc openmanage server administrator/9.1.0.1
- version/dell emc openmanage server administrator/9.1.0.2
- version/dell emc openmanage server administrator/9.2
- version/dell emc openmanage server administrator/9.2.0.1
- version/dell emc openmanage server administrator/9.2.0.2