PT-2018-13195
CVE-2018-15771
·
Published
2018-11-13
·
Updated
2019-02-01
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Dell EMC RecoverPoint versions prior to 5.1.2.1
Dell EMC RecoverPoint for VMs versions prior to 5.2.0.2
Description
The issue allows a malicious
boxmgmt user to potentially determine the existence of any system file via Boxmgmt CLI. This is an information disclosure issue.Recommendations
For Dell EMC RecoverPoint versions prior to 5.1.2.1, update to version 5.1.2.1 or later.
For Dell EMC RecoverPoint for VMs versions prior to 5.2.0.2, update to version 5.2.0.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾