CVE-2018-15771

Опубликовано: 13 нояб. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.

Ссылки

http://www.securityfocus.com/bid/105916
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1042059
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2018/Nov/34
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/105916
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1042059
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2018/Nov/34
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*

Версия до 5.1.2.1 (исключая)

cpe:2.3:a:emc:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*

Версия до 5.2.0.2 (исключая)

EPSS

Процентиль: 24%

0.0008

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-5hqv-5j7f-95hv