{ "schema_version": "1.4.0", "id": "GHSA-x43r-h4j8-j6gq", "modified": "2022-05-24T16:44:45Z", "published": "2022-05-24T16:44:45Z", "aliases": [ "CVE-2019-3706" ], "details": "Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3706" }, { "type": "WEB", "url": "https://www.dell.com/support/article/us/en/04/sln316930/dsa-2019-028-dell-emc-idrac-multiple-vulnerabilities?lang=en" } ], "database_specific": { "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-04-26T19:29:00Z" } }