CVE-2021-21514: medium-severity vulnerability in Dell Open Manage Server Administrator
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 5.4%
In short
Dell EMC OpenManage Server Administrator has a flaw that lets administrators with access view files they shouldn't be able to reach by crafting special web requests. This could expose sensitive system information.
Technical detail
Path traversal vulnerability (CWE-22) in OMSA versions 9.5 and prior allows authenticated admin users to bypass directory restrictions and read arbitrary files via malicious URL parameters. Attack requires admin-level privileges and access to the management interface.
Summary generated and translated by AI from the official description.
Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Dell · Dell Open Manage Server AdministratorRelated CVEs — Dell Open Manage Server Administrator
In the same product, most dangerous first.