{"id":"CVE-2020-5389","state":"PUBLISHED","title":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low ","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","publishedAt":"2020-10-08T14:50:12.102Z","updatedAt":"2024-09-16T22:45:47.550Z","severity":{"score":9,"label":"Critical","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","source":"dell"},"assigner":"dell","products":["Dell OMIMSSC (OpenManage Integration for Microsoft System Center)"],"affected":[{"vendor":"Dell","product":"OMIMSSC (OpenManage Integration for Microsoft System Center)","versions":[{"version":"unspecified","status":"affected","lessThan":"7.2.1 A01","versionType":"custom"}]}],"references":["https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T19:47:35.543Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/5xxx/CVE-2020-5389.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-5389","state":"PUBLISHED","datePublished":"2020-10-08T14:50:12.102Z","dateUpdated":"2024-09-16T22:45:47.550Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2020-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs."}],"affected":[{"vendor":"Dell","product":"OMIMSSC (OpenManage Integration for Microsoft System Center)","versions":[{"version":"unspecified","status":"affected","lessThan":"7.2.1 A01","versionType":"custom"}]}],"references":[{"url":"https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","description":"CWE-532: Information Exposure Through Log Files","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","dateUpdated":"2020-10-08T14:50:12.000Z","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe"},"datePublic":"2020-10-05T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@dell.com","DATE_PUBLIC":"2020-10-05","ID":"CVE-2020-5389","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"OMIMSSC (OpenManage Integration for Microsoft System Center)","version":{"version_data":[{"version_affected":"<","version_value":"7.2.1 A01"}]}}]},"vendor_name":"Dell"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs."}]},"impact":{"cvss":{"baseScore":9,"baseSeverity":"Critical","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-532: Information Exposure Through Log Files"}]}]},"references":{"reference_data":[{"name":"https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en","refsource":"MISC","url":"https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T08:30:23.869Z"}}]}}}