7.3
High
CVE-2024-37130 Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability…
Description
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the machine. Exploitation may lead to a complete system compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell OpenManage Server Administrator 11.0 | earliest → < 11.0.1.1 | 11.0.1.1 |
| Dell OpenManage Server Administrator 10.3 | earliest → < 10.3.0.1 | 10.3.0.1 |
| openmanage_server_administrator 10.3 | earliest → < 10.3.0.1 | 10.3.0.1 |
Other CVEs of Dell OpenManage Server Administrator
The 4 CVEs of Dell OpenManage Server Administrator →
CVE-2024-45760
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper access control vulnerability
4.3
Medium
CVE-2024-45761
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability
5.4
Medium
CVE-2023-43079
Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability
7.3
High