DSA-2024-100: Security Update for Dell OpenManage Enterprise Path Traversal- Sensitive Data Disclosure Vulnerability
요약: Dell OpenManage Enterprise remediation is available for Path Traversal - Sensitive Data Disclosure vulnerability that may be exploited by malicious users to compromise the affected system. ...
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
Medium
세부 정보
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application. | 5.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N  |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application. | 5.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
영향을 받는 제품 및 문제 해결
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise | Versions prior to 4.0.1 | Version 4.0.1 or later | Support for Dell OpenManage Enterprise |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-25944 | Dell OpenManage Enterprise | Versions prior to 4.0.1 | Version 4.0.1 or later | Support for Dell OpenManage Enterprise |
개정 내역
| Revision | Date | Description |
|---|---|---|
| 1.0 | 03/28/2024 | Initial Release |
| 2.0 | 04/01/2024 | Updated initial release date to accurately reflect advisory publication date. |
관련 정보
법적 고지 사항
해당 제품
Dell OpenManage Enterprise문서 속성
문서 번호: 000223623
문서 유형: Dell Security Advisory
마지막 수정 시간: 01 4월 2024
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.