PT-2021-14570 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior Description: The issue allows a remote user with admin privileges to potentially view arbitrary files on the target system by sending a specially crafted URL request. This c...

Dell EMC OpenManage Server Administrator 路径遍历漏洞

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

Dell OpenManage Server Administrator Path Traversal (DSA-2020-172)

The version of Dell OpenManage Server Administrator OMSA running on the remote host is affected by a path traversal vulnerability due to improper sanitization of user-supplied input to a web API request. An unauthenticated, remote attacker can exploit this, via a crafted request, to gain file...

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM Information Disclosure Vulnerability

Dell EMC OpenManage Integration is a driver for the virtualization management console from Dell USA Inc. It simplifies the tools and tasks associated with managing and deploying servers in a virtual environment. A log information disclosure vulnerability exists in Dell EMC OpenManage Integration...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...

CVE-2020-5389

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contains an information disclosure vulnerability. Authenticated low-privileged OMIMSCC users may retrieve sensitive information from logs. The connected records (NVD, CNVD, CVE listing...

PT-2020-18449

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 Description The issue allows authenticated low privileged OMIMSCC users to potentially retrieve sensitive information from the logs...

CVE-2020-5389: Insertion of Sensitive Information into Log File

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs...

Dell EMC OpenManage Server Administrator Path Traversal Vulnerability

Dell EMC OpenManage Server Administrator OMSA is a set of system management solutions from Dell Dell. The program supports online diagnostics, system operation detection, device management and so on. A path traversal vulnerability exists in Dell EMC OpenManage Server Administrator 9.4 and earlier...

CVE-2020-5377

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

CVE-2020-5377

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

Path traversal

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

CVE-2020-5377: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain...

PT-2020-18440 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.4 and prior Description: The issue allows an unauthenticated remote attacker to potentially exploit multiple path traversal vulnerabilities by sending a crafted Web API request containi...

CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...

CVE-2020-5373

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device...

CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...