AFR-in-OMSA

Arbitrary File Read in OMSA Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator OMSA - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377...

FakeDellOM

FakeDellOM Фальшивый хост, которым может «управлять» Dell OMSA, что позволяет пройти мимо экрана входа и, возможно, послужить отправной точкой для фаззинга или другого тестирования. Backstory Проводя исследование потенциальных уязвимостей¹ в Dell OpenManage Server Administrator, меня интересовало...

CVE-2019-3721

Dell EMC Open Manage System Administrator OMSA versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a...

Dell OpenManage Server Administrator 8.4 Directory Traversal

Now that a patch has been available for Dell OMSA to fix CVE-2016-4004 et al for a few days, I feel more comfortable discussing a severe variant of the vulnerability that works against Linux hosts new! and does not require credentials that work on the victim host new!. Admins running Dell OMSA on...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...