{"affected":[{"affectedData":[{"product":"Dell Open Manage Server Administrator","vendor":"Dell","versions":[{"lessThanOrEqual":"9.5","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*","matchCriteriaId":"BEDA83EB-FBB0-479E-88BC-21A3CFB5B068","versionEndExcluding":"9.4.0.3","vulnerable":true},{"criteria":"cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*","matchCriteriaId":"B600F2C4-37A8-4B2C-84EA-4DCFB1F48C82","versionEndExcluding":"9.5.0.1","versionStartIncluding":"9.5.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system."},{"lang":"es","value":"Las instalaciones de Microsoft Windows de Dell EMC OpenManage Server Administrator (OMSA) versión 9.5, con configuración habilitada de Distributed Web Server (DWS) contienen una vulnerabilidad de omisión de autenticación. Un atacante remoto no autenticado podría potencialmente explotar esta vulnerabilidad para conseguir acceso de administrador en el sistema afectado"}],"id":"CVE-2021-21513","lastModified":"2026-06-17T03:35:42.300","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"security_alert@emc.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-03-02T16:15:12.817","references":[{"source":"security_alert@emc.com","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities"},{"source":"security_alert@emc.com","tags":["Exploit","Third Party Advisory"],"url":"https://www.tenable.com/security/research/tra-2021-07"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.tenable.com/security/research/tra-2021-07"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"security_alert@emc.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-287"}],"source":"nvd@nist.gov","type":"Primary"}]}