AFR-in-OMSA

Arbitrary File Read in OMSA Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator OMSA - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377...

Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Exploit

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out https://github.com/hantwister/FakeDellOM class...

Dell OpenManage Server Administrator 9.4.0.0 File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

CVE-2020-5377: Dell OpenManage Server Administrator File Read

The post CVE-2020-5377: Dell OpenManage Server Administrator File Read appeared first on Rhino Security Labs...

CVE-2020-5377

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and earlier are affected by path traversal vulnerabilities. An unauthenticated remote attacker can send crafted Web API requests with directory traversal sequences to gain file system access on the managed station (arbitrary file read)....