Authentication flaw

2021-03-0216:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

JSON

Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system.

CPENameOperatorVersion
openmanage_server_administratorlt9.4.0.3
openmanage_server_administratorge9.5.0.0
openmanage_server_administratorlt9.5.0.1

Name	Operator	Version
openmanage_server_administrator	lt	9.4.0.3
openmanage_server_administrator	ge	9.5.0.0
openmanage_server_administrator	lt	9.5.0.1

References

www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities

www.tenable.com/security/research/tra-2021-07