description: Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.
problem types: Incorrect File Permissions
affected:
{
product: Dell EMC Unity
vendor: Dell EMC
versions:
lessThanOrEqual: 4.3.1.x, status: affected, version: 4.3.0.x, versionType: custom
}
{
product: Dell EMC UnityVSA
vendor: Dell EMC
versions:
lessThanOrEqual: 4.3.1.x, status: affected, version: 4.3.0.x, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.0
]