Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000224251


DSA-2024-184: Security Update for Dell OpenManage Enterprise Vulnerability

Summary: Dell OpenManage Enterprise remediation is available for a sensitive information disclosure vulnerability that may be exploited by malicious users to compromise the affected system.

Article Content


Impact

Medium

Details

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-28961 Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity. 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L This hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-28961 Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity. 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions Remediated Versions Link
Dell OpenManage Enterprise Versions 4.0.0 and 4.0.1 4.1.0 Support for Dell OpenManage Enterprise | Dell US
Product Affected Versions Remediated Versions Link
Dell OpenManage Enterprise Versions 4.0.0 and 4.0.1 4.1.0 Support for Dell OpenManage Enterprise | Dell US
For additional remediation information, including work-arounds, see the link below.
https://www.dell.com/support/kbdoc/000225211

Revision History

RevisionDateDescription
1.02024-04-25Initial release
2.02024-05-31Added a link to KB article for additional information

Related Information


Article Properties


Affected Product

Dell OpenManage Enterprise

Last Published Date

31 May 2024

Article Type

Dell Security Advisory