CVE-2018-1241
- State
- Published
- Severity
- Not scored
- Published
- May 29, 2018
- Updated
- Sep 17, 2024
- Reserved
- Dec 6, 2017
Description
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.
Scores
The record has no CVSS score.
Weaknesses
- CWE-532 Information Exposure Through Log Files
Affected Products
| Product | Versions |
|---|---|
Dell EMC RecoverPointDell EMC |
|
Dell EMC RecoverPoint Virtual Machine (VM)Dell EMC |
|
References
- 20180522 DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilitiesmailing-list
- 104246vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.