DSA-2022-077: Dell OpenManage Enterprise Security Update for an Authorization Bypass Vulnerability
Resumen: Dell OpenManage Enterprise remediation is available for an authorization bypass vulnerability that may be exploited by malicious users to compromise the affected system.
Este artículo se aplica a:
Este artículo no se aplica a:
Este artículo no está vinculado a ningún producto específico.
En este artículo no se identifican todas las versiones de los productos.
Impacto
Critical
Detalles
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-26857 | Dell OpenManage Enterprise versions 3.8.3 and earlier contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions. | 9.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-26857 | Dell OpenManage Enterprise versions 3.8.3 and earlier contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions. | 9.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
Productos afectados y corrección
| CVE Addressed | Product | Affected Versions | Updated Version(s) | Link to Update |
| CVE-2022-26857 | Dell OpenManage Enterprise | Versions before 3.8.4 | 3.8.4 | See Dell KB article 175879: https://www.dell.com/support/kbdoc/en-us/000175879/support-for-openmanage-enterprise |
| CVE Addressed | Product | Affected Versions | Updated Version(s) | Link to Update |
| CVE-2022-26857 | Dell OpenManage Enterprise | Versions before 3.8.4 | 3.8.4 | See Dell KB article 175879: https://www.dell.com/support/kbdoc/en-us/000175879/support-for-openmanage-enterprise |
Historial de revisiones
| Revision | Date | Description |
| 1.0 | 2022-04-18 | Initial Release |
Agradecimientos
Dell would like to thank Bartosz Reginiak for reporting this issue.
Información relacionada
Aviso legal
Productos afectados
Dell OpenManage Enterprise, Product Security InformationPropiedades del artículo
Número de artículo: 000197800
Tipo de artículo: Dell Security Advisory
Última modificación: 18 abr 2022
Encuentra las respuestas que necesitas con la ayuda de otros usuarios de Dell
Servicios de asistencia
Comprueba si tu dispositivo está cubierto por los servicios de asistencia.