Описание
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.
Ссылки
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 5.1.2 (исключая)Версия до 5.1.1.3 (исключая)
Одно из
cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00765
Низкий
8.8 High
CVSS3
4 Medium
CVSS2
Дефекты
CWE-532
CWE-532
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.
EPSS
Процентиль: 73%
0.00765
Низкий
8.8 High
CVSS3
4 Medium
CVSS2
Дефекты
CWE-532
CWE-532