We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2018-1250



Description

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.

Reserved 2017-12-06 | Published 2018-09-28 | Updated 2024-09-17 | Assigner dell


MEDIUM: 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

Authorization Bypass

Product status

Any version before 4.3.1.1525703027
affected

Any version before 4.3.1.1525703027
affected

References

seclists.org/fulldisclosure/2018/Sep/30 (20180918 DSA-2018-101: Dell EMC Unity Family Multiple Vulnerabilities) mailing-list

cve.org (CVE-2018-1250)

nvd.nist.gov (CVE-2018-1250)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2018-1250

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.