Dell OpenManage Server Administrator (XSL hijacking local privilege escalation): A local low-privileged user hijacks

Impact

A local low-privileged user hijacks an XSL load path and escalates to admin, gaining full control of the machine.

Who can reach it

Local low-privilege user on a host running OMSA 11.0.1.0 or earlier.

What to do

Upgrade OMSA past 11.0.1.0. Agent update on every host that runs it.

References