Openmanage Server Administrator Managed Node Patch For Windows
Monthly
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a remote, unauthenticated attacker to bypass authentication controls and gain unauthorized access to the systems management interface across Windows, RHEL 8.10/9.4, and SLES 15 deployments. The CVSS 3.1 base score is 9.8 (network vector, no privileges, no user interaction) with total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none, but the trivial attack path makes prompt patching important.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a remote, unauthenticated attacker to bypass authentication controls and gain unauthorized access to the systems management interface across Windows, RHEL 8.10/9.4, and SLES 15 deployments. The CVSS 3.1 base score is 9.8 (network vector, no privileges, no user interaction) with total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none, but the trivial attack path makes prompt patching important.