Security Advisory

CVE-2018-1250

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-28 18:00:00

Last updated 2024-09-17 04:04:33

Assigner dell

CVSS score 6.5

State PUBLISHED

Description

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.

← Browse all CVEs View on cve.org ↗