CVE-2018-1241

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.

CVSS v3 8.8 HIGH
CVSS v2.0 4.0 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://seclists.org/fulldisclosure/2018/May/61	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/104246	Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2018/May/61	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/104246	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:recoverpoint::::::::
	cpe:2.3:a:emc:recoverpoint_for_virtual_machines::::::::

History

21 Nov 2024, 03:59

Type	Values Removed	Values Added
References	~~() http://seclists.org/fulldisclosure/2018/May/61 - Mailing List, Third Party Advisory~~	() http://seclists.org/fulldisclosure/2018/May/61 - Mailing List, Third Party Advisory
References	~~() http://www.securityfocus.com/bid/104246 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/104246 - Third Party Advisory, VDB Entry

Information

Published : 2018-05-29 17:29

Updated : 2024-11-21 03:59

NVD link : CVE-2018-1241

Mitre link : CVE-2018-1241

CVE.ORG link : CVE-2018-1241

JSON object : View

Products Affected

emc

recoverpoint
recoverpoint_for_virtual_machines

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2018-1241", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-05-29T17:29:00.277", "references": [{"url": "http://seclists.org/fulldisclosure/2018/May/61", "tags": ["Mailing List", "Third Party Advisory"], "source": "security_alert@emc.com"}, {"url": "http://www.securityfocus.com/bid/104246", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security_alert@emc.com"}, {"url": "http://seclists.org/fulldisclosure/2018/May/61", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/104246", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-532"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks."}, {"lang": "es", "value": "Dell EMC RecoverPoint, en versiones anteriores a la 5.1.2 y RecoverPoint for VMs en versiones anteriores a la 5.1.1.3, podr\u00edan filtrar contrase\u00f1as LDAP en texto plano en el archivo de registro RecoverPoint. Un usuario autenticado malicioso con acceso a los archivos de registro de RecoverPoint podr\u00eda obtener la contrase\u00f1a LDAP expuesta para emplearla en m\u00e1s ataques."}], "lastModified": "2024-11-21T03:59:26.900", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23E36916-2D79-4118-BBDA-07445258AA27", "versionEndExcluding": "5.1.2"}, {"criteria": "cpe:2.3:a:emc:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05C16FD7-5BE1-441B-9743-C3F8F57078D0", "versionEndExcluding": "5.1.1.3"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}