PT-2018-13194 · Dell+1 · Dell Openmanage Network Manager+1

Matt Bergin + 1 · Publicado 2018-11-30 · Atualizado 2020-08-24 · CVE-2018-15768

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell OpenManage Network Manager versions prior to 6.5.0

Description The issue is related to an insecure default configuration setting for the embedded MySQL database, which allows MySQL users to have read/write access to the file system.

Recommendations For versions prior to 6.5.0, update to version 6.5.0 or later to resolve the issue.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-15768

Produtos afetados

Dell Openmanage Network Manager

Mysql Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/45852 · Exploit
• http://securityfocus.com/bid/105914 · Nota
• https://dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15768 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15768 · Nota de Segurança