CVE-2018-1184

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Boxmgmt CLI may allow a malicious user with boxmgmt privileges to bypass Boxmgmt CLI and r...

Command injection

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted...

CVE-2018-1185

The CVE-2018-1185 issue affects EMC RecoverPoint for Virtual Machines and RecoverPoint, with vulnerable versions listed as prior to 5.1.1, 5.1.0.0, and prior to 5.0.1.3. The Admin CLI contains a command injection flaw that could let a user with admin privileges escape the restricted shell and exe...

CVE-2018-1184

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Boxmgmt CLI may allow a malicious user with boxmgmt privileges to bypass Boxmgmt CLI and r...

CVE-2018-1184

CVE-2018-1184 affects EMC RecoverPoint for Virtual Machines (and RecoverPoint for VMs) where the Boxmgmt CLI contains a command-injection vulnerability. The issue allows a malicious user with boxmgmt privileges to bypass the Boxmgmt CLI and execute arbitrary commands with root privileges. Affecte...

CVE-2018-1185

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted...

CVE-2018-1185: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted...

CVE-2018-1184: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Boxmgmt CLI may allow a malicious user with boxmgmt privileges to bypass Boxmgmt CLI and r...

PT-2018-10850

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines versions prior to 5.1.1 EMC RecoverPoint version 5.1.0.0 EMC RecoverPoint versions prior to 5.0.1.3 Description An issue was discovered that allows a malicious user with admin privileges to escape from the...

CVE-2016-6650

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system...

Information disclosure

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system...

CVE-2016-6650

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system...

CVE-2016-6650

CVE-2016-6650 is documented in multiple sources as a vulnerability in EMC RecoverPoint products prior to version 5.0 and EMC RecoverPoint for Virtual Machines prior to 5.0. The connected cnvd/cve entries describe an SSL Stripping security bypass that could enable a man‑in‑the‑middle attack and ac...

CVE-2016-6650

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system...

CVE-2016-6650: Exposure of Sensitive Information to an Unauthorized Actor

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system...

EMC RecoverPoint SSL Stripping Security Bypass Vulnerability

EMC RecoverPoint is a set of disaster recovery and data protection software, EMC RecoverPoint for Virtual Machines VMs is a set of disaster recovery solutions for VMware environments. EMC RecoverPoint SSL Stripping security bypass vulnerability. Allows an attacker to perform a man-in-the-middle...

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines Command Injection Vulnerability

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines VMs are both products of EMC Corporation. The former is a set of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. A command injection vulnerability exists in EMC...

EMC RecoverPoint Local Information Disclosure Vulnerability

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines VMs are both products of EMC Corporation. The former is a set of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. An information disclosure vulnerability exists in EMC...

Command injection

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...