Maple Labs

CVE search · CVE-2018-15771

CVE-2018-15771

medium 5.5

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
security_alert@emc.com
Weakness
CWE-200

Severity

VersionScoreVectorSource
CVSS 3.0 medium 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N nvd@nist.govPrimary
CVSS 2.0 medium 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • emc · recoverpoint
  • emc · recoverpoint_for_virtual_machines

References