CVE-2018-1242
- State
- Published
- Severity
- Not scored
- Published
- May 29, 2018
- Updated
- Sep 16, 2024
- Reserved
- Dec 6, 2017
Description
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command injection vulnerability in the Boxmgmt CLI. An authenticated malicious user with boxmgmt privileges may potentially exploit this vulnerability to read RPA files. Note that files that require root permission cannot be read.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Dell EMC RecoverPointDell EMC |
|
Dell EMC RecoverPoint Virtual Machine (VM)Dell EMC |
|
References
- 20180522 DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilitiesmailing-list
- 104246vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.