Dell · Dell Openmanage Server Administrator · CVE-2016-4004
**Name of the Vulnerable Software and Affected Versions**
Dell OpenManage Server Administrator (OMSA) version 8.2
**Description**
A directory traversal issue allows remote authenticated administrators to read arbitrary files by using a .. (dot dot backslash) in the `file` parameter to the ViewFile endpoint.
**Recommendations**
For version 8.2, consider restricting access to the ViewFile endpoint until a patch is available. As a temporary workaround, avoid using the `file` parameter with .. (dot dot backslash) sequences to minimize the risk of exploitation.