CVE-2021-21564 Auth bypass in Dell OpenManage Enterprise
Remote unauthenticated attackers can hijack elevated sessions or perform unauthorized actions in Dell OpenManage Enterprise by sending malformed data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21564?
CVE-2021-21564 is a critical authentication bypass vulnerability in Dell OpenManage Enterprise, published on 9 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data.
Which versions are affected by CVE-2021-21564?
It affects 1 product.
Products include Dell Openmanage Enterprise.
How do I fix CVE-2021-21564?
No fix has been published for CVE-2021-21564 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-21564 being exploited?
There is no known exploitation of CVE-2021-21564 in the wild and no public exploit code.
Other vulnerabilities in Dell OpenManage Enterprise
- CVE-2021-21596 Information disclosure in Dell OpenManage Enterprise
- CVE-2021-21585 Command injection in Dell OpenManage Enterprise
- CVE-2022-26857 Missing authorization in OpenManage Enterprise
- CVE-2026-54795 Command injection in OpenManage Enterprise
- CVE-2026-71176 SQL injection in OpenManage Enterprise
Sources
Also known as GHSA-39hh-9mhm-44jx.