CVE-2018-15771

MEDIUM

Dell EMC RecoverPoint < 5.1.2.1 and RecoverPoint for VMs < 5.2.0.2 - Information Disclosure via Boxmgmt CLI

Title source: llm

Description

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1042059

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105916

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

https://seclists.org/fulldisclosure/2018/Nov/34

Scores

CVSS v3 5.5

EPSS 0.0008

EPSS Percentile 23.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

emc/recoverpoint < 5.1.2.1

emc/recoverpoint_for_virtual_machines < 5.2.0.2

Published Nov 13, 2018

Tracked Since Feb 18, 2026