Description
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DELL EMC | VPlex Software: GeoSynchrony | unspecified – < 6.1 | 6.1 |
References
- 1041613 vdb-entry
- 20180907 DSA-2018-156: Dell EMC VPLEX Insecure File Permissions vulnerability on Witness mailing-list