CVE-2019-3762 Security feature bypass in Data Protection Central
Remote attackers can bypass certificate validation to impersonate valid systems and compromise data integrity in Dell Data Protection Central.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3762?
CVE-2019-3762 is a high-severity vulnerability in Dell Data Protection Central, published on 18 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.
Which versions are affected by CVE-2019-3762?
It affects 2 products.
Products include Dell Emc Data Protection Central, Dell Emc Integrated Data Protection Appliance.
How do I fix CVE-2019-3762?
No fix has been published for CVE-2019-3762 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3762 being exploited?
There is no known exploitation of CVE-2019-3762 in the wild and no public exploit code.
Other vulnerabilities in Dell Data Protection Central
Sources
Also known as GHSA-5r88-pc2r-4575.