Dell OpenManage Network Manager CVE-2018-15768 Remote Privilege Escalation Vulnerability

Bugtraq ID:	105914
Class:	Design Error
CVE:	CVE-2018-15768
Remote:	Yes
Local:	No
Published:	Nov 14 2018 12:00AM
Updated:	Nov 14 2018 12:00AM
Credit:	Matt Bergin (@thatguylevel) of KoreLogic, Inc.
Vulnerable:	Dell OpenManage Network Manager 6.0
Not Vulnerable:	Dell OpenManage Network Manager 6.5

Dell OpenManage Network Manager CVE-2018-15768 Remote Privilege Escalation Vulnerability

Dell OpenManage Network Manager is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated privileges.

Versions prior to Dell OpenManage Network Manager 6.5.0 are vulnerable.

Dell OpenManage Network Manager CVE-2018-15768 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dell OpenManage Network Manager CVE-2018-15768 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Dell OpenManage Network Manager CVE-2018-15768 Remote Privilege Escalation Vulnerability

References:

• Dell SonicWall NetExtender - Homepage (Dell)
  
• Dell OpenManage Network Manager Security Vulnerabilities (Dell)