{ "CVE_data_meta": { "ASSIGNER": "security_alert@emc.com", "DATE_PUBLIC": "2018-11-09T05:00:00.000Z", "ID": "CVE-2018-15771", "STATE": "PUBLIC", "TITLE": "Dell EMC RecoverPoint Information Disclosure Vulnerability" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Dell EMC RecoverPoint", "version": { "version_data": [ { "affected": "<", "version_value": "5.1.2.1" } ] } }, { "product_name": "Dell EMC RecoverPoint Virtual Machine (VM)", "version": { "version_data": [ { "affected": "<", "version_value": "5.2.0.2" } ] } } ] }, "vendor_name": "Dell EMC" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "information disclosure vulnerability" } ] } ] }, "references": { "reference_data": [ { "name": "1042059", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1042059" }, { "name": "105916", "refsource": "BID", "url": "http://www.securityfocus.com/bid/105916" }, { "name": "20181108 DSA-2018-205: Dell EMC RecoverPoint Multiple Vulnerabilities", "refsource": "FULLDISC", "url": "https://seclists.org/fulldisclosure/2018/Nov/34" } ] }, "source": { "discovery": "UNKNOWN" } }