Vulnerability Description
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Recoverpoint | < 5.1.2 |
| Emc | Recoverpoint For Virtual Machines | < 5.1.1.3 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2018/May/61Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/104246Third Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2018/May/61Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/104246Third Party AdvisoryVDB Entry
FAQ
What is CVE-2018-1241?
CVE-2018-1241 is a vulnerability with a CVSS score of 8.8 (HIGH). Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An auth...
How severe is CVE-2018-1241?
CVE-2018-1241 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-1241?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Recoverpoint, Emc Recoverpoint For Virtual Machines.