Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources.
CVE Status: Modified
Attribute | Value |
---|---|
Attack Complexity | LOW |
Attack Vector | LOCAL |
Availability Impact | LOW |
Base Score | 6.1 |
Base Severity | MEDIUM |
Confidentiality Impact | HIGH |
Integrity Impact | HIGH |
Privileges Required | HIGH |
Scope | UNCHANGED |
User Interaction | REQUIRED |
Vector String | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
Exploitability Score | 0.6 |
Impact Score | 5.5 |
Source | [email protected] |
Type | Secondary |