DSA-2021-060: Dell OpenManage Enterprise-Modular (OME-M) Security Update for a Bypass Vulnerability

Summary: Dell OpenManage Enterprise-Modular (OME-M) remediation is available for a security bypass vulnerability that may be exploited to compromise the affected systems.

Bu makale şunlar için geçerlidir: Bu makale şunlar için geçerli değildir: Bu makale, belirli bir ürüne bağlı değildir. Bu makalede tüm ürün sürümleri tanımlanmamıştır.

Impact

High

Details

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21530 Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21530 Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Etkilenen Ürünler ve Düzeltme

Product Affected Version(s) Updated Version(s) Link to Update
OpenManage Enterprise-Modular (OME-M) Versions prior to 1.30.00 1.30.00 OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US
Product Affected Version(s) Updated Version(s) Link to Update
OpenManage Enterprise-Modular (OME-M) Versions prior to 1.30.00 1.30.00 OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US

Revision History

RevisionDateDescription
1.02020-04-12Initial Release

Acknowledgements

CVE-2021-21530: Dell would like to thank Thorsten Tüllmann of Karlsruhe Institute of Technology

Related Information

Etkilenen Ürünler

Dell OpenManage Enterprise-Modular

Ürünler

Product Security Information
Makale Özellikleri
Article Number: 000185205
Article Type: Dell Security Advisory
Son Değiştirme: 13 Nis 2021
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.