dell emc-unityvsa CVE-2018-1250 is a vulnerability in Dell Emc Unityvsa
Published on September 28, 2018

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.

NVD


Products Associated with CVE-2018-1250

Want to know whenever a new CVE is published for Dell Emc Unityvsa? stack.watch will email you.

 

Affected Versions

Dell EMC Unity: Dell EMC UnityVSA:

Exploit Probability

EPSS
0.10%
Percentile
28.26%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.