Vulnerability Intelligence Report
CVE-2018-1241
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.
No Active Exploit Signals
CVSS Base Score
8.8
HIGH
EPSS Probability:1.58%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-532 ↗CWE-532: Information Exposure Through Log Files
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Dell EMC | Dell EMC RecoverPoint | unspecified < 5.1.2 (affected) |
| Dell EMC | Dell EMC RecoverPoint Virtual Machine (VM) | unspecified < 5.1.1.3 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.582%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Dell · Vendor · USA |
| Reserved | 2017-12-06T00:00:00 |
| Published | 2018-05-29T17:00:00 |
| Patch Date | 2018-05-22 |
| Last Updated | 2024-09-17T01:21:43 |
Community Chatter & Buzz