CVE-2019-3734

MEDIUM

Dell EMC Unity <5.0.0.0.5.116 - Privilege Escalation

Title source: llm

Description

Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users.

References (1)

Core 1

Core References

Broken Link, Vendor Advisory x_refsource_misc

https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/details/535028/DSA-2019-086-Dell-EMC-Unity-Family-Multiple-Vulnerabilities

Scores

CVSS v3 5.4

EPSS 0.0013

EPSS Percentile 31.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Details

Status published

Products (2)

dell/emc_unity_operating_environment < 5.0.0.0.5.116

dell/emc_unityvsa_operating_environment < 5.0.0.0.5.116

Published Jul 18, 2019

Tracked Since Feb 18, 2026