admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-21 05:40:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed CVE-2019-3710 json error

Browse Source
This commit is contained in:
DellEMCProductSecurity 2019-03-28 13:27:58 -04:00
parent 121372ce5c
commit 114eac6c37
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
2019/3xxx/CVE-2019-3710.json
View File

@ -1,7 +1,7 @@
{ {
"CVE_data_meta": { "CVE_data_meta": {
"ASSIGNER": "secure@dell.com", "ASSIGNER": "secure@dell.com",
"DATE_PUBLIC": "2019-03-18T05:00:00.000Z" "DATE_PUBLIC": "2019-03-18T05:00:00.000Z",
"ID": "CVE-2019-3710", "ID": "CVE-2019-3710",
"STATE": "PUBLIC", "STATE": "PUBLIC",
"TITLE": "DSA-2019-034: Dell Networking OS10 Key Management Error Vulnerability" "TITLE": "DSA-2019-034: Dell Networking OS10 Key Management Error Vulnerability"
@ -17,8 +17,7 @@
"version": { "version": {
"version_data": [ "version_data": [
{ {
"version_affected": "<", "version_value": "10.4.3.0"
"version_value": "10.4.3"
} }
] ]
} }
@ -37,7 +36,7 @@
"description_data": [ "description_data": [
{ {
"lang": "eng", "lang": "eng",
"value": "Dell Networking OS10 versions prior to 10.4.3 contain a vulnerability caused by improper key management. As a result of this vulnerability, authentication and encryption can be bypassed, and an attacker can run arbitrary code with escalated user privileges." "value": "Dell Networking OS10 has been updated to address a vulnerability which may be potentially exploited to compromise the system."
} }
] ]
}, },
@ -66,7 +65,7 @@
"description": [ "description": [
{ {
"lang": "eng", "lang": "eng",
"value": "As a result of this vulnerability, authentication and encryption can be bypassed, and an attacker can run arbitrary code with escalated user privileges." "value": "Dell Networking OS10 versions prior to 10.4.3 contain a vulnerability caused by improper key management. As a result of this vulnerability, authentication and encryption can be bypassed, and an attacker can run arbitrary code with escalated user privileges."
} }
] ]
} }