CVE Vulnerabilities

CVE-2020-5389

Insertion of Sensitive Information into Log File

Published: Oct 08, 2020 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Emc_openmanage_integration_for_microsoft_system_center Dell * 7.2.1 (excluding)

Potential Mitigations

References