CVE-2020-5377
CRITICALDell EMC OpenManage Server Administrator < 9.4 - Unauthenticated Path Traversal via Web API Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-5377. PoCs published by Rhino Security Labs, und3sc0n0c1d0, h3x0v3rl0rd.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Dell OpenManage Server Administrator (OMSA) versions <= 9.4 to achieve arbitrary file read. It bypasses authentication by impersonating a Dell OMSA remote system and then allows reading files via crafted API requests.
Description
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.
Exploits (3)
This exploit leverages a path traversal vulnerability in Dell OpenManage Server Administrator (OMSA) versions <= 9.4 to achieve arbitrary file read. It bypasses authentication by impersonating a Dell OMSA remote system and then allows reading files via crafted API requests.
This repository contains a functional Python script that exploits arbitrary file read vulnerabilities in Dell OpenManage Server Administrator (OMSA) by leveraging authentication bypass and path traversal techniques. The script tests for multiple CVEs (CVE-2016-4004, CVE-2020-5377, CVE-2021-21514) and retrieves file contents from the target system.
This repository contains a functional exploit for CVE-2020-5377, an arbitrary file read vulnerability in Dell OpenManage Server Administrator. The exploit bypasses authentication and allows reading files from the target system by leveraging a path traversal vulnerability in the DownloadServlet endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N