AFR-in-OMSA

Arbitrary File Read in OMSA Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator OMSA - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

CVE-2016-4004

Dell OpenManage Server Administrator (OMSA) is affected by CVE-2016-4004 (directory traversal via the file parameter to /ViewFile). Multiple sources confirm that authenticated admins could read arbitrary files; versions 8.2 (and affected 7.x/8.x) are implicated, with a patch referenced for 8.5. I...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...