CVE-2016-6648: Medium severity EMC RecoverPoint vulnerability
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may access this sensitive system file and compromise the affected system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
EMC RecoverPointto a version that resolves this vulnerability.Fixed in 4.4.1.1 - Upgrade
Upgrade
EMC RecoverPoint for Virtual Machinesto a version that resolves this vulnerability.Fixed in 5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6648?
CVE-2016-6648 has a moderate severity rating due to the potential for sensitive information disclosure.
How do I fix CVE-2016-6648?
To fix CVE-2016-6648, upgrade EMC RecoverPoint to version 4.4.1.1 or later, or EMC RecoverPoint for Virtual Machines to version 5.0 or later.
Who is affected by CVE-2016-6648?
CVE-2016-6648 affects users running EMC RecoverPoint versions prior to 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions prior to 5.0.
What type of vulnerability is CVE-2016-6648?
CVE-2016-6648 is a sensitive information disclosure vulnerability caused by incorrect permissions on a system file.
Can a malicious administrator exploit CVE-2016-6648?
Yes, a malicious administrator with configuration privileges can exploit CVE-2016-6648 to access sensitive information.