CVE-2020-5377

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

• CWE-22
• CWE-22

• http://packetstormsecurity.com/files/162110/Dell-OpenManage-Server-Administrator-9.4.0.0-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/en-us/sln322304/dsa-2020-172-dell-emc-openmanage-server-administrator-omsa-path-traversal-vulnerability?lang=enVendor Advisory
• http://packetstormsecurity.com/files/162110/Dell-OpenManage-Server-Administrator-9.4.0.0-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/en-us/sln322304/dsa-2020-172-dell-emc-openmanage-server-administrator-omsa-path-traversal-vulnerability?lang=enVendor Advisory

Published

Jul 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5370Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 c…6.8
• CVE-2020-5371Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EM…8.8
• CVE-2020-5372Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain …7.5
• CVE-2020-5373Dell EMC OpenManage Integration for Microsoft System Center …7.5
• CVE-2020-5374Dell EMC OpenManage Integration for Microsoft System Center …7.5
• CVE-2020-5376Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI…6.8
• CVE-2020-5378Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI…6.8
• CVE-2020-5379Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI…6.8
• CVE-2020-5383Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale …5.3
• CVE-2020-5384Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Mi…8.4
• CVE-2020-5385Dell Encryption versions prior to 10.8 and Dell Endpoint Sec…7.8
• CVE-2020-5386Dell EMC ECS, versions prior to 3.5, contains an Exposure of…7.5