Security Advisory

CVE-2019-3722

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-06 19:13:51
Last updated 2024-09-16 17:22:35
Assigner dell
State PUBLISHED

Description

Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.