What is CVE-2018-11079?

CVE-2018-11079 is a vulnerability in Dell EMC Secure Remote Services versions prior to 3.32.00.08 that allows an authenticated malicious user to obtain exposed passwords stored in plaintext.

How does CVE-2018-11079 affect Dell EMC Secure Remote Services?

CVE-2018-11079 affects Dell EMC Secure Remote Services versions prior to 3.32.00.08 by storing database credentials in plaintext in a configuration file, making them accessible to authenticated malicious users.

What is the severity rating of CVE-2018-11079?

CVE-2018-11079 has a severity rating of 7.8 (high).

How can an authenticated malicious user exploit CVE-2018-11079?

An authenticated malicious user with access to the configuration file can exploit CVE-2018-11079 by obtaining the exposed plaintext password, thereby gaining unauthorized access.

How can I fix CVE-2018-11079?

To fix CVE-2018-11079, upgrade Dell EMC Secure Remote Services to version 3.32.00.08 or later, which addresses the plaintext password storage vulnerability.

Vulnerability/
CVE-2018-11079

high

7.8

CWE

522

18/10/2018

17/9/2024

CVE-2018-11079

First published: Thu Oct 18 2018(Updated: )

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain access to the application database.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
EMC Secure Remote Services	<3.32.00.08

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2018-11079?
CVE-2018-11079 is a vulnerability in Dell EMC Secure Remote Services versions prior to 3.32.00.08 that allows an authenticated malicious user to obtain exposed passwords stored in plaintext.
How does CVE-2018-11079 affect Dell EMC Secure Remote Services?
CVE-2018-11079 affects Dell EMC Secure Remote Services versions prior to 3.32.00.08 by storing database credentials in plaintext in a configuration file, making them accessible to authenticated malicious users.
What is the severity rating of CVE-2018-11079?
CVE-2018-11079 has a severity rating of 7.8 (high).
How can an authenticated malicious user exploit CVE-2018-11079?
An authenticated malicious user with access to the configuration file can exploit CVE-2018-11079 by obtaining the exposed plaintext password, thereby gaining unauthorized access.
How can I fix CVE-2018-11079?
To fix CVE-2018-11079, upgrade Dell EMC Secure Remote Services to version 3.32.00.08 or later, which addresses the plaintext password storage vulnerability.

collector/nvd-index
agent/weakness
agent/references
agent/author
agent/severity
agent/type
agent/description
agent/event
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/emc
canonical/emc secure remote services

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.