{"id":"CVE-2019-3718","state":"PUBLISHED","title":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerab","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","publishedAt":"2019-04-18T19:58:22.877Z","updatedAt":"2024-09-16T21:57:00.834Z","severity":{"score":7.6,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","source":"dell"},"assigner":"dell","products":["Dell SupportAssist Client"],"affected":[{"vendor":"Dell","product":"SupportAssist Client","versions":[{"version":"unspecified","status":"affected","lessThan":"3.2.0.90","versionType":"custom"}]}],"references":["https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","http://www.securityfocus.com/bid/108020"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3718.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-3718","state":"PUBLISHED","datePublished":"2019-04-18T19:58:22.877Z","dateUpdated":"2024-09-16T21:57:00.834Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems."}],"affected":[{"vendor":"Dell","product":"SupportAssist Client","versions":[{"version":"unspecified","status":"affected","lessThan":"3.2.0.90","versionType":"custom"}]}],"references":[{"url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/108020","name":"108020","tags":["vdb-entry","x_refsource_BID"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Improper Origin Validation","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"dell","dateUpdated":"2019-04-22T11:06:04.000Z","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe"},"credits":[{"lang":"en","value":"Dell would like to thank John C. Hennessy-ReCar for reporting CVE-2019-3718."}],"datePublic":"2019-04-17T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.6"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security_alert@emc.com","DATE_PUBLIC":"2019-04-17T17:04:00.000Z","ID":"CVE-2019-3718","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SupportAssist Client","version":{"version_data":[{"version_affected":"<","version_value":"3.2.0.90"}]}}]},"vendor_name":"Dell"}]}},"credit":[{"lang":"eng","value":"Dell would like to thank John C. Hennessy-ReCar for reporting CVE-2019-3718."}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems."}]},"generator":{"engine":"Vulnogram 0.0.6"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Origin Validation"}]}]},"references":{"reference_data":[{"name":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","refsource":"MISC","url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en"},{"name":"108020","refsource":"BID","url":"http://www.securityfocus.com/bid/108020"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/108020","name":"108020","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:19:17.692Z"}}]}}}