VULNERABILITY INTELLIGENCE

CVE-2018-1241

CVSS score8.8 HIGH

EPSS probability1.51%

CISA KEVNot currently listed

Published2018-05-29

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.

Weakness classification

CWE-532: Insertion of Sensitive Information into Log File

Primary references

security_alert@emc.com — Mailing List, Third Party Advisory
security_alert@emc.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry