DSA-2025-457: Dell OpenManage Server Administrator (OMSA) Security Update for Apache Tomcat Uncontrolled Resource Consumption Vulnerability

Oversigt: Dell OpenManage Server Administrator (OMSA) remediation is available for an Apache Tomcat Uncontrolled Resource Consumption Vulnerability that could be exploited by malicious users to compromise the affected system. ...

Denne artikel gælder for Denne artikel gælder ikke for Denne artikel er ikke knyttet til et bestemt produkt. Det er ikke alle produktversioner, der er identificeret i denne artikel.
Udforsk andre ressourcer

Virkning

High

Oplysninger

Third-party Components

CVEs

More Information

Apache Tomcat 

CVE-2025-53506

See NVD link below for individual scores for each CVE.

https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies anbefaler, at alle kunder tager hensyn til både CVSS-basisresultatet og alle relevante tidsmæssige og miljømæssige resultater, som kan have betydning for den potentielle alvorsgrad, der er forbundet med en bestemt sikkerhedsrisiko.

Berørte produkter og udbedring

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Dell OpenManage Server Administrator Managed Node for Windows

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=72Y17

Dell OpenManage Server Administrator Managed Node for RHEL 8.x

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=HFK1W

Dell OpenManage Server Administrator Managed Node for RHEL 9.x

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=CDDFC

Dell OpenManage Server Administrator Managed Node for SLES 15

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=TPMTR

 

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Dell OpenManage Server Administrator Managed Node for Windows

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=72Y17

Dell OpenManage Server Administrator Managed Node for RHEL 8.x

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=HFK1W

Dell OpenManage Server Administrator Managed Node for RHEL 9.x

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=CDDFC

Dell OpenManage Server Administrator Managed Node for SLES 15

Apache Tomcat

Versions prior to 11.1.0.1

Version 11.1.0.1 or later

https://www.dell.com/support/home/drivers/DriversDetails?driverid=TPMTR

 

After OMSA is installed, the Apache Tomcat version can be identified by using one of the methods below.  This can be used to verify that Apache Tomcat is upgraded to the recommended version as noted in CVE-2025-53506.

  • Open the "About" page on the Server Administrator GUI and locate the Apache Tomcat version
  • Use the CLI command "omreport about details=true" 

Revisionshistorik

Revision

Date

Description

1.0

2025-12-17

Initial Release

 

Relaterede oplysninger

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Ansvarsfraskrivelse

Berørte produkter

Dell OpenManage Server Administrator Version 8.4, Dell OpenManage Server Administrator Version 8.5, Dell OpenManage Server Administrator Version 9.0.1, Dell OpenManage Server Administrator Version 9.0.2 , Dell OpenManage Server Administrator Version 9.1, Dell OpenManage Server Administrator Version 8.3, Dell OpenManage Server Administrator Version 2.3, Dell OpenManage Server Administrator Version 5.0, Dell OpenManage Server Administrator Version 5.1, Dell OpenManage Server Administrator Version 5.2, Dell OpenManage Server Administrator Version 5.3, Dell OpenManage Server Administrator Version 5.4, Dell OpenManage Server Administrator Version 5.5, Dell OpenManage Server Administrator Version 6.0.1, Dell OpenManage Server Administrator Version 6.0.3, Dell OpenManage Server Administrator Version 6.1, Dell OpenManage Server Administrator Version 6.1.1, Dell OpenManage Server Administrator Version 6.2, Dell OpenManage Server Administrator Version 6.3, Dell OpenManage Server Administrator Version 6.4, Dell OpenManage Server Administrator Version 6.5, Dell OpenManage Server Administrator Version 6.5 A02, Dell OpenManage Server Administrator Version 7.0, Dell OpenManage Server Administrator Version 7.1, Dell OpenManage Server Administrator Version 7.2, Dell OpenManage Server Administrator Version 7.3, Dell OpenManage Server Administrator Version 7.4, Dell OpenManage Server Administrator Version 8.0.1, Dell OpenManage Server Administrator Version 8.0.2, Dell OpenManage Server Administrator Version 8.1, Dell OpenManage Server Administrator Version 8.2, Dell OpenManage Server Administrator Version 9.1.1, Dell OpenManage Server Administrator Version 10.0.1, Dell OpenManage Server Administrator Version 10.1.0.0, Dell OpenManage Server Administrator Version 10.2.0.0, Dell OpenManage Server Administrator Version 10.3.0.0, Dell OpenManage Server Administrator Version 11.1.0.0, Dell OpenManage Server Administrator Version 11.0.0.0, Dell OpenManage Server Administrator Version 11.0.1.0, Dell OpenManage Server Administrator Version 9.1.2, Dell OpenManage Server Administrator Version 9.2, Dell OpenManage Server Administrator Version 9.2.1, Dell OpenManage Server Administrator Version 9.3, Dell OpenManage Server Administrator Version 9.3.1, Dell OpenManage Server Administrator Version 9.3.2, Dell OpenManage Server Administrator Version 9.4, Dell OpenManage Server Administrator Version 9.5 ...
Artikelegenskaber
Artikelnummer: 000404950
Artikeltype: Dell Security Advisory
Senest ændret: 17 dec. 2025
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.