Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

RecoverPoint may reveal system file existence

CVE-2018-15771 · published 7 years ago
Summary

Older versions of Dell EMC RecoverPoint and RecoverPoint for VMs can let a user with box management privileges discover whether specific system files are present. This exposure could give an attacker insight into the system’s configuration. Upgrade to the latest versions to close this information leak.

What to do
  • Update emc recoverpoint to version 5.1.2.1 or later.
  • Update emc recoverpoint_for_virtual_machines to version 5.2.0.2 or later.
Affected software
VendorProductAffected versions
emc recoverpoint < 5.1.2.1
cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*
emc recoverpoint_for_virtual_machines < 5.2.0.2
cpe:2.3:a:emc:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*
Original advisory text
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able ...
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published13 Nov 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-15771 · NVD
Track software like this
Free during beta