9.1
Critical
CVE-2020-5377 Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities
Description
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Open Manage Server Administrator 9.5 | earliest → < 9.5 | 9.5 |