First published: Thu Apr 10 2014(Updated: )
Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer.
Credit: PSIRT-CNA@flexerasoftware.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell OpenManage Server Administrator | <=7.2.0 | |
Dell OpenManage Server Administrator | =7.0.0 | |
Dell OpenManage Server Administrator | =7.0.0.1 | |
Dell OpenManage Server Administrator | =7.1.0 | |
Dell OpenManage Server Administrator | =7.1.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0740 has a medium severity rating, as it allows remote attackers to conduct phishing attacks.
To fix CVE-2013-0740, update Dell OpenManage Server Administrator to version 7.3.0 or later.
CVE-2013-0740 allows attackers to perform open redirect attacks, potentially leading to phishing.
Versions 7.2.0 and below of Dell OpenManage Server Administrator are affected by CVE-2013-0740.
Yes, CVE-2013-0740 is exploitable remotely, allowing attacks from anywhere on the internet.