CVE-2019-3718

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability

High · published April 18, 2019

CVSS v3.0
7.6
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00673 · 51.5th percentile
Published
2019-04-18T19:58Z
EPSS history
Timeline
  • 18 APR 19:58Z
    Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability
    cvelistv5