PT-2018-11212
CVE-2018-1249
·
Published
2018-07-02
·
Updated
2019-10-09
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Dell EMC iDRAC9 versions prior to 3.21.21.21
Description
The issue concerns a lack of enforcement for TLS/SSL connections to the iDRAC web server for specific URLs. This could allow a man-in-the-middle attacker to remove SSL/TLS protection from a connection between a client and a server.
Recommendations
For versions prior to 3.21.21.21, update to version 3.21.21.21 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾