Dell OpenManage Network Manager CVE-2018-15767 Authorization Bypass Vulnerability

Bugtraq ID:	105912
Class:	Access Validation Error
CVE:	CVE-2018-15767
Remote:	Yes
Local:	No
Published:	Nov 14 2018 12:00AM
Updated:	Nov 14 2018 12:00AM
Credit:	Matt Bergin (@thatguylevel) of KoreLogic, Inc.
Vulnerable:	Dell OpenManage Network Manager 6.5
Not Vulnerable:	Dell OpenManage Network Manager 6.5.3

Dell OpenManage Network Manager CVE-2018-15767 Authorization Bypass Vulnerability

Dell OpenManage Network Manager is prone to an authorization-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Versions prior to Dell OpenManage Network Manager 6.5.3 are vulnerable.

Dell OpenManage Network Manager CVE-2018-15767 Authorization Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dell OpenManage Network Manager CVE-2018-15767 Authorization Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Dell OpenManage Network Manager CVE-2018-15767 Authorization Bypass Vulnerability

References:

• Dell Homepage (Dell)
  
• Dell OpenManage Network Manager Security Vulnerabilities (Dell)