DSA-2022-077: Dell OpenManage Enterprise Security Update for an Authorization Bypass Vulnerability
概要: Dell OpenManage Enterprise remediation is available for an authorization bypass vulnerability that may be exploited by malicious users to compromise the affected system.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Critical
詳細
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-26857 | Dell OpenManage Enterprise versions 3.8.3 and earlier contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions. | 9.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-26857 | Dell OpenManage Enterprise versions 3.8.3 and earlier contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions. | 9.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
影響を受ける製品と修復
| CVE Addressed | Product | Affected Versions | Updated Version(s) | Link to Update |
| CVE-2022-26857 | Dell OpenManage Enterprise | Versions before 3.8.4 | 3.8.4 | See Dell KB article 175879: https://www.dell.com/support/kbdoc/en-us/000175879/support-for-openmanage-enterprise |
| CVE Addressed | Product | Affected Versions | Updated Version(s) | Link to Update |
| CVE-2022-26857 | Dell OpenManage Enterprise | Versions before 3.8.4 | 3.8.4 | See Dell KB article 175879: https://www.dell.com/support/kbdoc/en-us/000175879/support-for-openmanage-enterprise |
変更履歴
| Revision | Date | Description |
| 1.0 | 2022-04-18 | Initial Release |
確認
Dell would like to thank Bartosz Reginiak for reporting this issue.
関連情報
法的免責事項
対象製品
Dell OpenManage Enterprise, Product Security Information文書のプロパティ
文書番号: 000197800
文書の種類: Dell Security Advisory
最終更新: 18 4月 2022
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。