ZeroHour

CVE-2019-3718

CVSS 3.1
8.8 high
EPSS
<1%p50
Published
()
Modified
Description

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.

Vendors
dell
Products
supportassist
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news