PT-2018-11148

Name of the Vulnerable Software and Affected Versions Dell EMC ViPR Controller versions after 3.0.0.38 Description The issue concerns an information exposure in the VRRP, where the cluster password is sent in plaintext through multicast due to an insecure default configuration in Linux's keepaliv...

CVE-2018-1240: Exposure of Sensitive Information to an Unauthorized Actor

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...