Dell OpenManage Enterprise (credential disclosure): A low-privileged local user obtains stored credentials from OME

Impact

A low-privileged local user obtains stored credentials from OME, leading to elevated unauthorized access - in practice, the BMC credentials OME uses to manage the fleet.

Who can reach it

Local low-privilege access to the OME appliance (versions 4.0.0/4.0.1).

What to do

Apply the DSA-2024-184 update, then rotate the discovery/management credentials OME holds. The rotation matters more than the patch.

References