Database/Firmware, BMC & network fabric
Dell OpenManage Enterprise: path traversal exposes files to a low-privileged adjacent user
Impact
A low-privileged console account can traverse outside the intended directory and read files on the OpenManage Enterprise appliance; Dell rates confidentiality high with no integrity or availability impact. On this appliance the interesting files are the ones holding iDRAC and fabric credentials and inventory for the managed fleet, so a read-only account becomes a credential-harvesting position against the servers OME manages. This is a separate flaw from the high-privilege traversal pair in the same advisory (CVE-2026-91903 / CVE-2026-91911): different privilege requirement and a read rather than a write.
Who can reach it
Adjacent-network access to the OME console with a valid low-privileged account. Authentication required.
What to do
Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467): appliance update and console restart; managed nodes need no action. No workaround is published. If any credentials stored on the appliance may have been read, rotate them after patching.
References
Related entries
- Intel processors (indirect branch prediction): Spectre v2: an attacker trains the indirect branch predictor so that aCVE-2017-5715 · Intel processors (indirect branch prediction)Medium
- Intel processors (bounds check bypass): Spectre v1: speculative execution past a bounds check lets an attacker readCVE-2017-5753 · Intel processors (bounds check bypass)Medium
- Intel processors (rogue data cache load): Meltdown: unprivileged code reads kernel memory - and on affected partsCVE-2017-5754 · Intel processors (rogue data cache load)Medium
- Intel processors: speculative sampling of stale data from microarchitectural buffers (MDS)CVE-2018-12126 · Intel processors (microarchitectural data sampling)Medium
- Intel processors (L1 terminal fault, OS/SMM): The OS-level variant of L1 terminal fault: a local user can speculativelyCVE-2018-3620 · Intel processors (L1 terminal fault, OS/SMM)Medium
- Intel processors (rogue system register read): Spectre v3a: speculative reads of system registers leak systemCVE-2018-3640 · Intel processors (rogue system register read)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.