CVEs-PoC/2020/CVE-2020-5377.md

CVE-2020-5377

Description

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

POC

Reference

• http://packetstormsecurity.com/files/162110/Dell-OpenManage-Server-Administrator-9.4.0.0-File-Read.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/H4cksploit/CVEs-master
• https://github.com/RhinoSecurityLabs/CVEs
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/merlinepedra/RHINOECURITY-CVEs
• https://github.com/merlinepedra25/RHINOSECURITY-CVEs
• https://github.com/sunzu94/AWS-CVEs
• https://github.com/und3sc0n0c1d0/AFR-in-OMSA