Dell Lifecycle Luki w zabezpieczeniach

Oś czasu

Wersja

7.1.0 P074
7.0.12
7.0.22
7.1.02

Przeciwdziałanie

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Wektor dostępu

Not Defined0
Physical0
Local1
Adjacent0
Network5

Uwierzytelnianie

Not Defined0
High0
Low5
None1

Interakcja z użytkownikiem

Not Defined0
Required1
None5

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤61
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤61
≤72
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤41
≤52
≤60
≤73
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤81
≤93
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤73
≤80
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k1
<10k5
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k4
<2k0
<5k0
<10k1
<25k1
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (4): 7.0.1, 7.0.2, 7.1, 7.1.0 P07

Link to Product Website: https://www.dellemc.com/

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2019-09-116.66.6Dell EMC RSA Identity Governance Debug Log File Password information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-3763
2019-09-115.05.0Dell EMC RSA Identity Governance Access Request Module Stored cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-3761
2019-09-117.27.1Dell EMC RSA Identity Governance Back-End Database sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-3760
2019-09-116.97.0Dell EMC RSA Identity Governance Groovy Script privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-3759
2018-07-135.55.5Dell EMC RSA Identity Lifecycle/Governance Web Application Reflected cross site scripting$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2018-1255
2018-07-138.08.0Dell EMC RSA Identity Lifecycle/Governance ACM Webserver privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2018-1245

więcej wpisów autorstwa Dell

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!