Impact
Dell OpenManage Network Integration versions prior to 3.9 suffer an Improper Authentication flaw that allows a low‑privileged attacker with remote access to gain unauthorized credentials and read sensitive information. The vulnerability is limited to authentication bypass; it does not provide remote code execution or denial of service, but it does compromise confidentiality by exposing application data.
Affected Systems
The affected product is Dell OpenManage Network Integration. All installations running any version earlier than 3.9 are impacted. The specific product name appears as Dell OpenManage Network Integration, and the vendor is Dell.
Risk and Exploitability
The CVSS score of 4.3 indicates a low severity, and the EPSS score of less than 1% suggests a very low exploitation probability. The flaw can be leveraged by an attacker who obtains a low‑privileged account on the network or can reach the OpenManage server remotely, and can then bypass authentication to access privileged data. The vulnerability is not catalogued in KEV, and no public exploits have been reported, so the risk is moderate but still warrants patching before it is actively exploited.
OpenCVE Enrichment