CVE-2021-21513
High
Description
Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system.
SeverityHigh
CVSS8.6
Exploit probability—
ProductDell Openmanage Server Administrator
PublishedMar 2, 2021
First seenMar 2, 2021
Weakness typeCWE-287Improper authentication
How to fix
Update
- dell openmanage_server_administrator9.4.0.3, 9.5.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell openmanage_server_administrator | v < 9.4.0.3, 9.5.0.0 ≤ v < 9.5.0.1 | 9.4.0.3, 9.5.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.