PT-2018-10292
CVE-2018-11080
·
Published
2018-10-18
·
Updated
2019-10-09
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Dell EMC Secure Remote Services versions prior to 3.32.00.08
Description
The issue is related to improper file permissions in configuration files. These files have world-readable permissions, which could allow an authenticated malicious user to use the file contents to potentially elevate their privileges.
Recommendations
For versions prior to 3.32.00.08, update to version 3.32.00.08 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾