Dell OMSA: externally controlled class selection bypasses a protection mechanism

Impact

OMSA selects classes or code to load based on input an unauthenticated attacker controls, which Dell reports as a protection-mechanism bypass with low impact across confidentiality, integrity and availability. Unsafe reflection is usually a stepping stone rather than the whole attack - it is the piece that defeats a check standing in front of the other OMSA flaws fixed in the same advisory. Treat it as part of the same patch decision rather than something to weigh alone.

Who can reach it

Network access to the OMSA service on a managed node. No authentication required.

What to do

Upgrade OMSA to 11.1.0.3 or later on every managed node and restart the OMSA services; the same package fixes the other DSA-2026-403 issues.

References

Related entries

• Dell OMSA: local low-privileged user reads sensitive information beyond the agent's scopeCVE-2026-80356 · Dell OpenManage Server Administrator (sensitive information exposure)High
• Dell OMSA: hard-coded credentials give an unauthenticated remote attacker accessCVE-2026-81440 · Dell OpenManage Server Administrator (hard-coded credentials)High
• Dell OpenManage Enterprise: hard-coded cryptographic key exposes protected data to a local userCVE-2026-91912 · Dell OpenManage Enterprise (hard-coded cryptographic key)High
• IBM Power Systems firmware: crafted service-processor configuration data crashes the host firmware boot stackCVE-2026-96261 · IBM Power Systems host firmware (service processor configuration parsing)High
• AMD SEV / SEV-ES - missing nested page table protection: SEV and SEV-ES do not protect the nested page tables, so aCVE-2020-12967 · AMD SEV / SEV-ES - missing nested page table protectionHigh
• ArubaOS GRUB2 implementation (secure boot): Two flaws in ArubaOS's GRUB2 implementation allow secure bootCVE-2020-24637 · ArubaOS GRUB2 implementation (secure boot)High