CVE-2019-18577CWE-732

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability

Medium · published March 13, 2020

CVSS v3.0
6.7
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local user with XtremIO xinstall privileges may exploit this vulnerability to gain root access.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2020-03-13T20:30Z
EPSS history
Timeline
  • 13 MAR 20:30Z
    Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability
    cvelistv5