Maple Labs

CVE search · CVE-2018-11080

CVE-2018-11080

high 7.8

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.

Details

Status
Modified
Published
Last changed
Source
security_alert@emc.com
Weakness
CWE-732

Severity

VersionScoreVectorSource
CVSS 3.0 high 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H security_alert@emc.comSecondary
CVSS 3.0 high 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary
CVSS 2.0 medium 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • emc · secure_remote_services

References