CVE-2020-5377 PoC — Dell EMC OpenManage Server Administrator 路径遍历漏洞

Source

https://github.com/c0d3cr4f73r/CVE-2020-5377

Associated Vulnerability

Title:Dell EMC OpenManage Server Administrator 路径遍历漏洞 (CVE-2020-5377)
Description:Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

Description

CVE-2020-5377: Dell OpenManage Server Administrator File Read

Readme

# CVE-2020-5377
CVE-2020-5377: Dell OpenManage Server Administrator File Read

```
Usage: python3 CVE-2020-5377.py <yourIP> <targetIP>:<targetPort>
```

![image](https://github.com/c0d3cr4f73r/CVE-2020-5377/assets/66146701/0e699cce-d88e-4892-aaac-a698a3956670)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!