VULNERABILITY INTELLIGENCE

CVE-2020-26182

CVSS score6.8 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2020-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Description

Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remote user with low privileges may exploit this vulnerability to perform 'saveset' related operations in an unintended manner. The vulnerability is not exploitable by users authenticated via LDAP.

Weakness classification

  • CWE-266: Incorrect Privilege Assignment
  • CWE-552: Files or Directories Accessible to External Parties

Primary references