CVE-2016-6648

Published: Feb 3, 2017Modified: May 13, 2026

4.4

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may access this sensitive system file and compromise the affected system.

Affected (2)

Products: Emc: Recoverpoint, Recoverpoint For Virtual Machines

2 products

Recoverpoint For Virtual Machines

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Emc Recoverpoint	Up to 4.4.1.0
Emc Recoverpoint For Virtual Machines	Up to 4.0

Related CWEs

References (6)

http://www.securityfocus.com/archive/1/540058/30/0/threaded

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/95821

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037727

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540058/30/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/95821

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037727

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.