Dell EMC OpenManage Server Administrator 路径遍历漏洞

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

Dell OpenManage Server Administrator Path Traversal (DSA-2020-172)

The version of Dell OpenManage Server Administrator OMSA running on the remote host is affected by a path traversal vulnerability due to improper sanitization of user-supplied input to a web API request. An unauthenticated, remote attacker can exploit this, via a crafted request, to gain file...

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM Information Disclosure Vulnerability

Dell EMC OpenManage Integration is a driver for the virtualization management console from Dell USA Inc. It simplifies the tools and tasks associated with managing and deploying servers in a virtual environment. A log information disclosure vulnerability exists in Dell EMC OpenManage Integration...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contains an information disclosure vulnerability. Authenticated low-privileged OMIMSCC users may retrieve sensitive information from logs. The connected records (NVD, CNVD, CVE listing...

Dell EMC OpenManage Server Administrator Path Traversal Vulnerability

Dell EMC OpenManage Server Administrator OMSA is a set of system management solutions from Dell Dell. The program supports online diagnostics, system operation detection, device management and so on. A path traversal vulnerability exists in Dell EMC OpenManage Server Administrator 9.4 and earlier...

CVE-2020-5377

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

CVE-2020-5377

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

Path traversal

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

PT-2020-18440 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior Description: The issue allows an unauthenticated remote attacker to potentially exploit multiple path traversal vulnerabilities by sending a crafted Web API request containi...

CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...

CVE-2020-5373

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device...

CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM/SCVMM versions prior to 7.2.1 contains a hard-coded cryptographic key vulnerability. A remote, unauthenticated attacker could potentially access appliance data on remotely managed devices. Affected version range is SCC...

CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...

CVE-2020-5373

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM, versions prior to 7.2.1, contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to retrieve the managed device’s system inventory data. Affected component: OMIMS...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5320

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to...

CVE-2020-5322

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...