CVE-2024-48008 — Dell / RecoverPoint for Virtual Machines

CVE-2024-48008

Dell / RecoverPoint for Virtual Machines PUBLISHED

Description (CNA)

Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information

Affected (CNA)

Vendor / product	Versions
Dell / RecoverPoint for Virtual Machines	affected 6.0 SP1; affected 6.0 SP1 P1

CWE

CWE-11

References

https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.