PT-2018-10850
CVE-2018-1185
·
تاريخ النشر
2018-02-03
·
تاريخ التحديث
2021-05-26
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
EMC RecoverPoint for Virtual Machines versions prior to 5.1.1
EMC RecoverPoint version 5.1.0.0
EMC RecoverPoint versions prior to 5.0.1.3
Description
An issue was discovered that allows a malicious user with admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privileges due to a command injection vulnerability in the Admin CLI.
Recommendations
For EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, update to version 5.1.1 or later.
For EMC RecoverPoint version 5.1.0.0, update to a version later than 5.1.0.0.
For EMC RecoverPoint versions prior to 5.0.1.3, update to version 5.0.1.3 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾