CVE-2018-1250

Name of the Vulnerable Software and Affected Versions Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027

Description The issue allows a remote authenticated user to potentially bypass authorization and read files on a NAS server. This is achieved by directly interacting with certain APIs of Unity OE, which bypasses the Role-Based Authorization control that is only implemented in the Unisphere GUI.

Recommendations For versions prior to 4.3.1.1525703027, update to version 4.3.1.1525703027 or later to resolve the issue.