CVE-2018-15765

Published: Oct 18, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks.

Affected (1)

Products: Dell: Emc Secure Remote Services

1 product

Emc Secure Remote Services

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Secure Remote Services	Before 3.32.00.08

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.securityfocus.com/bid/105694

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041877

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

https://seclists.org/fulldisclosure/2018/Oct/35

Source: security_alert@emc.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/105694

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041877

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://seclists.org/fulldisclosure/2018/Oct/35

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.