Description (CNA)
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 | affected EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/540058/30/0/threaded
- http://www.securitytracker.com/id/1037727
- http://www.securityfocus.com/bid/95821
ADP enrichment
No English description supplied.