CVE-2020-5389CWE-532

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure…

Critical · published October 8, 2020

CVSS v3.0
9.0
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.

The record
Technical detail
CVSS v3.0
9.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00944 · 60.7th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2020-10-08T14:50Z
EPSS history
Timeline
  • 08 OCT 14:50Z
    Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure…
    cvelistv5