CVE-2023-43079: 
Dell OpenManage Server Administrator vulnerability analysis and mitigation

Dell OpenManage Server Administrator (OMSA), versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability identified as CVE-2023-43079. The vulnerability was disclosed in October 2023 and affects Dell's OpenManage Server Administrator software (Dell Advisory, NVD).

The vulnerability is classified as an Improper Access Control issue (CWE-284). It has received a CVSS v3.1 Base Score of 7.3 HIGH with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires local access and low privileges to exploit, with user interaction required (Dell Advisory).

If successfully exploited, this vulnerability allows a local low-privileged malicious user to execute arbitrary code with elevated privileges on the affected system. The exploitation could lead to a complete system compromise (NVD, Dell Advisory).

Dell has released security updates to address this vulnerability. The remediated versions include OMSA version 11.0.0.0,A01 and 11.0.1.0,A00. Users are advised to upgrade to these patched versions. No workarounds are available for this vulnerability (Dell Advisory).