CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

CVE-2016-6649

EMC RecoverPoint and RecoverPoint for Virtual Machines are affected by multiple command injection vulnerabilities in versions prior to 4.4.1.1 and 5.0 respectively. A malicious administrator with configuration privileges can bypass the UI and escalate to root privileges. Root cause: command injec...