← CVE Intelligence

CVE-2018-1249

iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs PUBLISHED

Description (CNA)

Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server.

Affected (CNA)

Vendor / productVersions
Dell EMC / iDRAC9affected unspecified before 3.21.21.21

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.