CVE-2018-15765 LOW

CVE-2018-15765

Vendor Dell Emc
Product ESRS Virtual Edition
Published October 18, 2018
Last update September 16, 2024

CVSS base score

3.4/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks.

Key dates

02Disclosure timeline

October 18, 2018 CVE published
September 16, 2024 Record updated