CVE-2018-11080

HIGH

EMC Secure Remote Services - Incorrect Permission Assignment

Title source: rule

Description

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.

Scores

CVSS v3 7.3
EPSS 0.0005
EPSS Percentile 14.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Classification

CWE
CWE-732
Status published

Affected Products (1)

emc/secure_remote_services < 3.32.00.08

Timeline

Published Oct 18, 2018
Tracked Since Feb 18, 2026