CVE-2026-111499: Medium severity vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires local access to Dell OpenManage Enterprise and a low-privileged account. The provided information does not indicate that unauthenticated or remote attackers can exploit it.
Which versions are affected?
Dell OpenManage Enterprise versions prior to 4.8.0 are affected. Upgrading to version 4.8.0 or later addresses the affected version range described.
What is the impact of successful exploitation?
A successful exploit could allow a low-privileged local attacker to bypass a protection mechanism. The provided information does not describe confidentiality, integrity, or availability impacts beyond that bypass.