CVE-2018-11078

Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.

Score

CVSS 3.0 7.5 High

Status

Modified - security_alert@emc.com

Published

2018-09-11

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Emc Vplex Geosynchrony (Dell)
• Vplex Software Geosynchrony (Dell Emc)

References

• http://www.securitytracker.com/id/1041613
• https://seclists.org/fulldisclosure/2018/Sep/10