EMC RecoverPoint command injection in SSH username

Added: 07/05/2018 CVE: CVE-2018-1235 BID: 104246 Background Dell EMC RecoverPoint is an application recovery solution. Problem A command injection vulnerability allows a remote attacker to execute arbitrary commands embedded in the username of an SSH authentication request. Resolution Upgrade to...

PT-2018-10850

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines versions prior to 5.1.1 EMC RecoverPoint version 5.1.0.0 EMC RecoverPoint versions prior to 5.0.1.3 Description An issue was discovered that allows a malicious user with admin privileges to escape from the...

CVE-2016-6648: Undefined Security Weakness

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

PT-2015-6606

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines VMs version 4.2 Description The issue allows local users to bypass the Installation Manager Boxmgmt CLI interface, resulting in root-shell access. Recommendations For version 4.2, at the moment, there is n...

CVE-2015-4526: Improper Access Control

EMC RecoverPoint for Virtual Machines VMs 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface...