CVE-2018-1240

Dell EMC ViPR Controller (versions after 3.0.0.38) contains an information exposure in VRRP due to keepalived’s insecure default configuration, causing the cluster password to be sent in plaintext via multicast. A malicious user with access to the vCloud subnet could sniff the password and reuse ...