Vulnerability Details CVE-2018-15771
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.9%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.9
References
Products affected by CVE-2018-15771
-
cpe:2.3:a:emc:recoverpoint:4.4.1.0
-
cpe:2.3:a:emc:recoverpoint:4.4.1.1
-
cpe:2.3:a:emc:recoverpoint:5.0
-
cpe:2.3:a:emc:recoverpoint:5.0.1.3
-
cpe:2.3:a:emc:recoverpoint:5.1.0.0
-
cpe:2.3:a:emc:recoverpoint:5.1.2
-
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:4.0
-
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:4.4.1.1
-
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:5.1.1
-
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:5.1.1.3