Critical · 9.8 CVE-2018-15764 EUVD-2018-7627GHSA-9q4q-j83f-fprv

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of trigger…

Published Sep 28, 2018 · Updated Sep 16, 2024 · Assigned by dell

Vendor: DELL EMC Product: ESRS Policy Manager

Description

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.

Affected products

Vendor	Product	Affected	Fixed
DELL EMC	ESRS Policy Manager	unspecified – < 6.8	6.8

References

1041714 vdb-entry
20180924 DSA-2018-158: Dell EMC ESRS Policy Manager Remote Code Execution Vulnerability mailing-list
105405 vdb-entry