CVE-2020-5377

This exploit leverages a path traversal vulnerability in Dell OpenManage Server Administrator (OMSA) versions <= 9.4 to achieve arbitrary file read. It bypasses authentication by impersonating a Dell OMSA remote system and then allows reading files via crafted API requests.

This repository contains a functional Python script that exploits arbitrary file read vulnerabilities in Dell OpenManage Server Administrator (OMSA) by leveraging authentication bypass and path traversal techniques. The script tests for multiple CVEs (CVE-2016-4004, CVE-2020-5377, CVE-2021-21514) and retrieves file contents from the target system.

This repository contains a functional exploit for CVE-2020-5377, an arbitrary file read vulnerability in Dell OpenManage Server Administrator. The exploit bypasses authentication and allows reading files from the target system by leveraging a path traversal vulnerability in the DownloadServlet endpoint.