CVEs-PoC/2016/CVE-2016-4004.md

CVE-2016-4004

Description

Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash) in the file parameter to ViewFile.

POC

Reference

• https://www.exploit-db.com/exploits/39486/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/und3sc0n0c1d0/AFR-in-OMSA