AFR-in-OMSA

Lettura arbitraria di file in OMSA Validazione delle vulnerabilità di lettura arbitraria di file in Dell OpenManage Server Administrator OMSA - CVE-2016-4004, CVE-2021-21514 e CVE-2020-5377...

FakeDellOM

FakeDellOM Ein Fake-Host, der von Dell OMSA „verwaltet“ werden kann, Sie an der Anmeldeseite vorbeibringt und möglicherweise als Ausgangspunkt für Fuzzing oder andere Tests dient. Hintergrund Während der Recherche zu potenziellen Schwachstellen¹ in Dells OpenManage Server Administrator war ich...

CVE-2019-3721

Dell EMC Open Manage System Administrator OMSA versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a...

Dell OpenManage Server Administrator 8.4 Directory Traversal

Now that a patch has been available for Dell OMSA to fix CVE-2016-4004 et al for a few days, I feel more comfortable discussing a severe variant of the vulnerability that works against Linux hosts new! and does not require credentials that work on the victim host new!. Admins running Dell OMSA on...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...