CVE-2024-48007 — Dell / RecoverPoint for Virtual Machines

CVE-2024-48007

Dell / RecoverPoint for Virtual Machines PUBLISHED

Description (CNA)

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data.

Affected (CNA)

Vendor / product	Versions
Dell / RecoverPoint for Virtual Machines	affected 6.0 SP1; affected 6.0 SP1 P1

CWE

No CWE identifiers supplied.

References

https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.