DSA-2024-100: Security Update for Dell OpenManage Enterprise Path Traversal- Sensitive Data Disclosure Vulnerability
Resumen: Dell OpenManage Enterprise remediation is available for Path Traversal - Sensitive Data Disclosure vulnerability that may be exploited by malicious users to compromise the affected system. ...
Este artículo se aplica a
Este artículo no se aplica a
Este artículo no está vinculado a ningún producto específico.
No se identifican todas las versiones del producto en este artículo.
Impacto
Medium
Detalles
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application. | 5.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N  |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application. | 5.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Corrección y productos afectados
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise | Versions prior to 4.0.1 | Version 4.0.1 or later | Support for Dell OpenManage Enterprise |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise | Versions prior to 4.0.1 | Version 4.0.1 or later | Support for Dell OpenManage Enterprise |
Historial de revisiones
| Revision | Date | Description |
|---|---|---|
| 1.0 | 03/28/2024 | Initial Release |
| 2.0 | 04/01/2024 | Updated initial release date to accurately reflect advisory publication date. |
Información relacionada
Descargo de responsabilidad
Productos afectados
Dell OpenManage EnterprisePropiedades del artículo
Número del artículo: 000223623
Tipo de artículo: Dell Security Advisory
Última modificación: 01 abr 2024
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.