medium4.9Public exploit code
CVE-2016-4004
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a .…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal2016-02-23 · webapps · windows · Verified
Impact
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash) in the file parameter to ViewFile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Openmanage Server Administrator | Version 8.2 |