Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol (AMQP) component. User credentials are sent unencrypted to the remote AMQP service. An unauthenticated attacker in the same network collision domain, could potentially sniff the password from the network and use it to access the component using the privileges of the compromised user.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Jul/92 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/104963 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1041393 | Third Party Advisory VDB Entry |
http://seclists.org/fulldisclosure/2018/Jul/92 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/104963 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1041393 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://seclists.org/fulldisclosure/2018/Jul/92 - Mailing List, Third Party Advisory | |
References | () http://www.securityfocus.com/bid/104963 - Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id/1041393 - Third Party Advisory, VDB Entry |
Information
Published : 2018-08-01 06:29
Updated : 2024-11-21 03:42
NVD link : CVE-2018-11050
Mitre link : CVE-2018-11050
CVE.ORG link : CVE-2018-11050
JSON object : View
Products Affected
dell
- emc_networker