CVE-2020-5356
Last modified
CVE-2020-5356 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.. EPSS estimates a 1.27% chance of exploitation in the next 30 days.
Description
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerprotect Data Manager | < 19.4 |
| Dell | Powerprotect X400 Firmware | < 3.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-5356?
How severe is CVE-2020-5356?
How do I fix CVE-2020-5356?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-5349Dell EMC Networking S4100 and S5200 Series Switches manufact…9.8
- CVE-2020-5350Dell EMC Integrated Data Protection Appliance versions 2.0, …7.2
- CVE-2020-5351Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 …7.5
- CVE-2020-5352Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain a…8.8
- CVE-2020-5353The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EM…8.8
- CVE-2020-5355The Dell Isilon OneFS versions 8.2.2 and earlier SSHD proces…4.3
- CVE-2020-5357Dell Dock Firmware Update Utilities for Dell Client Consumer…6
- CVE-2020-5358Dell Encryption versions prior to 10.7 and Dell Endpoint Sec…7.8
- CVE-2020-5359Dell BSAFE Micro Edition Suite, versions prior to 4.5, are v…5.8
- CVE-2020-5360Dell BSAFE Micro Edition Suite, versions prior to 4.5, are v…7.5
- CVE-2020-5361Select Dell Client Commercial and Consumer platforms support…7.6
- CVE-2020-5362Dell Client Consumer and Commercial platforms include an imp…4.4
Are you affected by CVE-2020-5356?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST