CVE-2019-3720

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthorized access to the file system by exploiting insufficient sanitization of input parameters.

• CWE-22

• http://www.securityfocus.com/bid/108092Broken Link, Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/us/en/04/sln316915/dsa-2019-060-dell-emc-open-manage-system-administrator-multiple-vulnerabilities?lang=enVendor Advisory
• http://www.securityfocus.com/bid/108092Broken Link, Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/us/en/04/sln316915/dsa-2019-060-dell-emc-open-manage-system-administrator-multiple-vulnerabilities?lang=enVendor Advisory

Published

Apr 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3712Dell WES Wyse Device Agent versions prior to 14.1.2.9 and De…8.2
• CVE-2019-3715RSA Archer versions, prior to 6.5 SP1, contain an informatio…7.8
• CVE-2019-3716RSA Archer versions, prior to 6.5 SP2, contain an informatio…7.8
• CVE-2019-3717Select Dell Client Commercial and Consumer platforms contain…6.8
• CVE-2019-3718Dell SupportAssist Client versions prior to 3.2.0.90 contain…8.8
• CVE-2019-3719Dell SupportAssist Client versions prior to 3.2.0.90 contain…8
• CVE-2019-3721Dell EMC Open Manage System Administrator (OMSA) versions pr…7.5
• CVE-2019-3722Dell EMC OpenManage Server Administrator (OMSA) versions pri…7.5
• CVE-2019-3723Dell EMC OpenManage Server Administrator (OMSA) versions pri…9.1
• CVE-2019-3724RSA Netwitness Platform versions prior to 11.2.1.1 is vulner…6.5
• CVE-2019-3725RSA Netwitness Platform versions prior to 11.2.1.1 and RSA S…9.8
• CVE-2019-3726An Uncontrolled Search Path Vulnerability is applicable to t…6.7