CVE-2026-111498: Medium severity vulnerability
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an attacker to have both local access to the system and high privileges. It is not described as remotely exploitable.
Which deployments are affected?
OpenManage Enterprise versions earlier than 4.8.0 are affected. The provided information does not state whether any particular configuration changes exposure.
What is the potential impact if exploitation succeeds?
A successful exploit could bypass a protection mechanism and affect integrity and availability. No confidentiality impact is identified in the supplied severity vector.