Ga naar hoofdinhoud
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.

Artikelnummer: 000185205


DSA-2021-060: Dell OpenManage Enterprise-Modular (OME-M) Security Update for a Bypass Vulnerability

Samenvatting: Dell OpenManage Enterprise-Modular (OME-M) remediation is available for a security bypass vulnerability that may be exploited to compromise the affected systems.

Article content


Impact

High

Gegevens

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21530 Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21530 Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Affected Version(s) Updated Version(s) Link to Update
OpenManage Enterprise-Modular (OME-M) Versions prior to 1.30.00 1.30.00 OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US
Product Affected Version(s) Updated Version(s) Link to Update
OpenManage Enterprise-Modular (OME-M) Versions prior to 1.30.00 1.30.00 OpenManage Enterprise Modular v1.30.00 | Driver Details | Dell US

Bevestigingen

CVE-2021-21530: Dell would like to thank Thorsten Tüllmann of Karlsruhe Institute of Technology

Revisiegeschiedenis

RevisionDateDescription
1.02020-04-12Initial Release

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide


Artikeleigenschappen


Getroffen product

Dell OpenManage Enterprise-Modular

Product

Product Security Information

Datum laatst gepubliceerd

13 apr 2021

Versie

2

Artikeltype

Dell Security Advisory