CVE-2018-1241 | BDVDB-2026-101255 Detail

Dell EMCDell EMC RecoverPoint

Description#

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-532 Insertion of Sensitive Information into Log File

References#

http://seclists.org/fulldisclosure/2018/May/61
http://www.securityfocus.com/bid/104246

Exploit#

No public exploit known

History#

Version 12018-05-29Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.