Skip to content
Sign in
5.4 Medium

CVE-2019-3734 Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS…

Description

Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users.

Affected products and versions

Product Affected versions Fixed in
Unity 5.0 5.0 → < 5.0.0.0.5.116 5.0.0.0.5.116

Other CVEs of Unity

The 2 CVEs of Unity →
CVE-2019-3741 Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability 7.8 High
Track this CVE