Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute arbitrary code in order to elevate privileges on the system. Exploitation may lead to a complete system compromise.
References
Configurations
History
21 Nov 2024, 08:23
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| References | () https://www.dell.com/support/kbdoc/en-us/000218469/dsa-2023-367-dell-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities - Vendor Advisory |
20 Oct 2023, 20:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dell:emc_openmanage_server_administrator:*:*:*:*:*:*:*:* | |
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000218469/dsa-2023-367-dell-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Dell emc Openmanage Server Administrator
Dell |
13 Oct 2023, 12:47
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-13 12:15
Updated : 2024-11-21 08:23
NVD link : CVE-2023-43079
Mitre link : CVE-2023-43079
CVE.ORG link : CVE-2023-43079
JSON object : View
Products Affected
dell
- emc_openmanage_server_administrator
CWE
CWE-284
Improper Access Control