CVE-2021-21596

Dell OpenManage Enterprise (3.4–3.6.1) and OpenManage Enterprise Modular (1.20.00–1.30.00) contain a remote code execution vulnerability (CVE-2021-21596) that can lead to information disclosure and privilege elevation when an attacker on the same subnet can exploit exposed services. Several conne...

CVE-2021-21585

Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this vulnerability to execute arbitrary OS commands...

CVE-2021-21585

CVE-2021-21585 affects Dell OpenManage Enterprise (prior to 3.6.1). The vulnerability is an OS command injection in the RACADM and IPMI tools. An authenticated remote attacker with high privileges could potentially exploit this flaw to execute arbitrary OS commands on affected systems. The issue ...

CVE-2021-21584

Dell OpenManage Enterprise 3.5 and OpenManage Enterprise-Modular 1.30.00 are affected by an information disclosure vulnerability allowing an authenticated, low-privilege attacker to potentially exfiltrate OIDC server credentials. Affected component is the information-disclosure path; root cause d...

CVE-2021-21584

Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially exploit this vulnerability leading to disclosure of the OIDC server credentials...

CVE-2021-21564

Dell OpenManage Enterprise (pre-3.6.1) contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to hijack an elevated session or perform unauthorized actions by sending malformed data. Affected product: OpenManage Enterprise; affected versions: prior to...

CVE-2021-21564

Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data...

PT-2021-14639 · Dell · Dell Emc Openmanage Enterprise-Modular +1

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions 3.4 through 3.6.1 Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00 Description: The issue is a remote code execution vulnerability. A malicious attacker with access to the immediate subne...

PT-2021-14612 · Dell · Dell Openmanage Enterprise

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions prior to 3.6.1 Description: The issue is related to an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or...

Vulnerabilities fixed in Dell OpenManage Enterprise

Vulnerabilities have been fixed in Dell OpenManage Enterprise. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Spoofing Access to sensitive data Access to syste...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5370

Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 are affected by an arbitrary file overwrite vulnerability. The issue arises from a directory traversal during tar extraction, allowing a remote authenticated attacker with high privileges to overwrite arbitrary files by injecting maliciou...

DELL EMC OpenManage Enterprise 路径遍历漏洞

DELL EMC OpenManage Enterprise is an intuitive infrastructure management console from Dell DELL, U.S.A. OpenManage Enterprise is a system management and monitoring application that provides a comprehensive view of Dell EMC servers, chassis, storage devices, and network switches on an enterprise...

DELL EMC Repository Manager has an unspecified vulnerability

DELL EMC Repository Manager is an application within the Dell OpenManage product portfolio from Dell USA that allows IT administrators to easily manage system updates.Dell Repository Manager provides a searchable interface for creating custom software collections that are A security vulnerability...

Dell OpenManage Enterprise docker实例预认证RCE认证绕过漏洞（CVE-2021-21596）

Details - Remote Auth Bypass with 2 pre-auth RCEs in docker instances There is a chain of pre-auth vulnerabilities allowing to: get a shell on the redis container, as redis get a shell on the postgres container, as postgres get a full access to the postgres database bypass authentication on the w...

Dell OpenManage Enterprise Hardcoded Credentails / Privilege Escalation / Deserialization

Dell OpenManage Enterprise versions up to 3.6.1 suffer from multiple hard-coded credential issues, multiple privilege escalation, weak permissions, authentication bypass, and other vulnerabilities. Please find a text-only version below sent to security mailing lists. The complete version on...

Dell OpenManage Enterprise 操作系统命令注入漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An operating system command injection...

Dell OpenManage Enterprise 授权问题漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers in a single console. An unauthenticated remote attacker could...