high7.5
CVE-2019-3762
Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability.
Impact
Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Data Protection Central | Versions 1.0, 1.0.1, 18.1, 18.2, 19.1 |
| Dell | Emc Integrated Data Protection Appliance | Versions 2.0, 2.1, 2.2, 2.3, 2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/security/en-us/details/537007/DSA-2019-135-Dell-EMC-Data-Protection-Central-Improper-Chain-of-Trust-Vulnerability
- https://www.dell.com/support/security/en-us/details/537007/DSA-2019-135-Dell-EMC-Data-Protection-Central-Improper-Chain-of-Trust-Vulnerability