und3sc0n0c1d0/AFR-in-OMSA

PoC

Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator (OMSA) - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377.

view exploit source poc_in_githubauthor und3sc0n0c1d0published 2022-11-30catalog poc_in_github
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-21514USmedium4.9Exploit
Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vu…
CVE-2020-5377UScritical9.1Exploit
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit…
CVE-2016-4004USmedium4.9Exploit
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan