CVE-2020-5374

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM/SCVMM versions prior to 7.2.1 contains a hard-coded cryptographic key vulnerability. A remote, unauthenticated attacker could potentially access appliance data on remotely managed devices. Affected version range is SCC...

CVE-2020-5373

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM, versions prior to 7.2.1, contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to retrieve the managed device’s system inventory data. Affected component: OMIMS...

PT-2020-18438

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 Description The issue concerns a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this to...

CVE-2020-5373: Missing Authentication for Critical Function

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device...

CVE-2020-5374: Plaintext Storage of a Password

Dell EMC OpenManage Integration for Microsoft System Center OMIMSSC for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5322

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...

CVE-2020-5320

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to...

CVE-2020-5323

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

CVE-2019-3723

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...

CVE-2019-3722 XML External Entity (XXE) Injection Vulnerability

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...

CVE-2019-3722

Affected software/Component: Dell EMC OpenManage Server Administrator (OMSA). Vulnerability: XML External Entity (XXE) injection in OMSA prior to 9.1.0.3 and prior to 9.2.0.4. Root cause: XXE vulnerability allowing external entities to be processed in XML requests. Impact: Potential remote read o...

CVE-2019-3722: Improper Restriction of XML External Entity Reference

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...

PT-2019-16667

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 Dell EMC OpenManage Server Administrator OMSA versions prior to 9.2.0.4 Description The issue is related to an XML external entity XXE injection. A remote unauthenticated...

CVE-2019-3723: Improper Input Validation

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...

PT-2019-16668

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 Dell EMC OpenManage Server Administrator OMSA versions prior to 9.2.0.4 Description The issue allows a remote unauthenticated attacker to manipulate parameters of web...

CVE-2019-3720

Dell EMC Open Manage System Administrator OMSA versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthorized access to the file system by exploiting insufficient...

Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15767)

An authentication bypass vulnerability exists in Dell OpenManage Network Manager. The vulnerability is due to a misconfiguration in the /etc/sudoers file. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into t...

Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15768)

An authentication bypass vulnerability exists in Dell OpenManage Network Manager. The vulnerability is due to a misconfiguration in the /etc/sudoers file. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into t...

CVE-2018-15768

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...