Vulnerability Details CVE-2018-11078
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.5%
CVSS Severity
CVSS v3 Score 4.0
CVSS v2 Score 6.0
References
Products affected by CVE-2018-11078
-
cpe:2.3:a:dell:emc_vplex_geosynchrony:5.4
-
cpe:2.3:a:dell:emc_vplex_geosynchrony:5.5
-
cpe:2.3:a:dell:emc_vplex_geosynchrony:6.0