Description
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell EMC | Dell EMC RecoverPoint | unspecified – < 5.1.2.1 | 5.1.2.1 |
| Dell EMC | Dell EMC RecoverPoint Virtual Machine (VM) | unspecified – < 5.2.0.2 | 5.2.0.2 |
References
- 1042059 vdb-entry
- 105916 vdb-entry
- 20181108 DSA-2018-205: Dell EMC RecoverPoint Multiple Vulnerabilities mailing-list