CVE-2019-3767CWE-200

Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability

High · published October 14, 2019

CVSS v3.0
7.5
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially retrieve this sensitive information to then compromise the system and related systems.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-10-14T17:10Z
EPSS history
Timeline
  • 14 OCT 17:10Z
    Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability
    cvelistv5