Dell Openmanage Server Administrator Managed Node For Ubuntu 22 04
Monthly
Unauthenticated, network-reachable access to Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 can be leveraged through unsafe reflection (CWE-470) to bypass the product's protection mechanisms, an outcome Dell classifies under its DSA-2026-403 'network access vulnerabilities' advisory. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, base 7.3) means no credentials or user interaction are needed and the impact is partial across confidentiality, integrity and availability - consistent with an access-control/protection bypass rather than direct code execution. Exposure is limited primarily by reachability of the OMSA management interface, so hosts where OMSA is bound to management VLANs, localhost or firewalled admin networks are materially less exposed; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor-released fix is version 11.1.0.3.
Unauthenticated, network-reachable access to Dell OpenManage Server Administrator (OMSA) managed-node installations prior to 11.1.0.3 can be leveraged through unsafe reflection (CWE-470) to bypass the product's protection mechanisms, an outcome Dell classifies under its DSA-2026-403 'network access vulnerabilities' advisory. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, base 7.3) means no credentials or user interaction are needed and the impact is partial across confidentiality, integrity and availability - consistent with an access-control/protection bypass rather than direct code execution. Exposure is limited primarily by reachability of the OMSA management interface, so hosts where OMSA is bound to management VLANs, localhost or firewalled admin networks are materially less exposed; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor-released fix is version 11.1.0.3.