CVE-2021-21530

published 2021-04-30

CVE-2021-21530: Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low…

Priority P3 47 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
dell	openmanage_enterprise	>= unspecified < 1.30.00	1.30.00
dell	openmanage_enterprise-modular	< 1.30.00	1.30.00
fig2dev_project	fig2dev	>= 0 < 1:3.2.6a-6ubuntu1.1	1:3.2.6a-6ubuntu1.1
fig2dev_project	fig2dev	>= 0 < 1:3.2.7a-7ubuntu0.1	1:3.2.7a-7ubuntu0.1

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

osv 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78