{"id":"CVE-2020-5389","aliases":["EUVD-2020-26571","GHSA-gqgx-5pc5-6cw4"],"status":"published","title":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","severity":{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00944,"percentile":0.61347,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2020-10-08T14:50:12Z","modified":"2026-06-17T03:21:23Z","products":[{"vendor":"dell","product":"emc_openmanage_integration_for_microsoft_system_center"},{"vendor":"dell","product":"omimssc (openmanage integration for microsoft system center)"}],"references":[{"url":"https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5389"},{"url":"https://github.com/advisories/GHSA-gqgx-5pc5-6cw4"}],"sources":{"cve":[{"id":"CVE-2020-5389","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","status":"published","published":"2020-10-08T14:50:12.102Z","modified":"2024-09-16T22:45:47.55Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:47.22408Z"}],"euvd":[{"id":"EUVD-2020-26571","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","status":"published","published":"2020-10-08T14:50:12Z","modified":"2024-09-16T22:45:47Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:55:00.150098Z"}],"ghsa":[{"id":"GHSA-gqgx-5pc5-6cw4","title":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","status":"published","published":"2022-05-24T17:30:22Z","modified":"2023-01-29T05:04:04Z","updated_at":"2026-11-02T14:45:28.021412Z"}],"nvd":[{"id":"CVE-2020-5389","description":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.","status":"published","published":"2020-10-08T15:15:12.827Z","modified":"2026-06-17T03:21:23.813Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:06:19.351389Z"}]}}
