DSA-2021-060: Dell OpenManage Enterprise-Modular (OME-M) Security Update for a Bypass Vulnerability
Resumen: Dell OpenManage Enterprise-Modular (OME-M) remediation is available for a security bypass vulnerability that may be exploited to compromise the affected systems.
Este artículo se aplica a
Este artículo no se aplica a
Este artículo no está vinculado a ningún producto específico.
No se identifican todas las versiones del producto en este artículo.
Impacto
High
Detalles
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21530 | Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. | 8.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21530 | Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. | 8.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H |
Corrección y productos afectados
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
| OpenManage Enterprise-Modular (OME-M) | Versions prior to 1.30.00 | 1.30.00 | OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
| OpenManage Enterprise-Modular (OME-M) | Versions prior to 1.30.00 | 1.30.00 | OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US |
Historial de revisiones
| Revision | Date | Description |
| 1.0 | 2020-04-12 | Initial Release |
Reconocimientos
CVE-2021-21530: Dell would like to thank Thorsten Tüllmann of Karlsruhe Institute of Technology
Información relacionada
Descargo de responsabilidad
Productos afectados
Dell OpenManage Enterprise-ModularProductos
Product Security InformationPropiedades del artículo
Número del artículo: 000185205
Tipo de artículo: Dell Security Advisory
Última modificación: 13 abr 2021
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.