PT-2018-11147 · Dell Emc · Dell Emc Unity Operating Environment

Publicado 2018-05-08 · Atualizado 2019-01-07 · CVE-2018-1239

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968

Description The issue allows a remote application admin user to potentially execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed, due to multiple OS command injection vulnerabilities.

Recommendations For versions prior to 4.3.0.1522077968, update to version 4.3.0.1522077968 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-1239

Produtos afetados

Dell Emc Unity Operating Environment

Referências · 4

• http://securityfocus.com/bid/104092 · Nota
• http://seclists.org/fulldisclosure/2018/May/15 · Nota
• https://osv.dev/vulnerability/CVE-2018-1239 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1239 · Nota de Segurança