Vulnerability-Lookup

CNVD-2018-06712

Vulnerability from cnvd - Published: 2018-03-29

Title

Dell EMC Data Protection Advisor本地硬编码凭证信息泄露漏洞

Description

Dell EMC Data Protection Advisor是美国戴尔（Dell）公司的一套数据保护管理解决方案。该方案支持自动和集中执行所有此类数据的收集与分析，并获得数据保护环境和活动的单个全面视图等。 Dell EMC Data Protection Advisor 6.3 Patch 159之前版本和6.4 Patch 110之前的版本中存在安全漏洞，该漏洞源于硬编码数据库账户带有管理权限。攻击者可利用该漏洞获取数据库的访问权限。

Severity

中

Patch Name

Dell EMC Data Protection Advisor本地硬编码凭证信息泄露漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://sso.emc.com/sso/login.htm?CTAuthMode=BASIC

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-1206

Impacted products

Name
['DELL EMC Data Protection Advisor <6.3 Patch 159', 'DELL EMC Data Protection Advisor <6.4 Patch 110']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "103376"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1206"
    }
  },
  "description": "Dell EMC Data Protection Advisor\u662f\u7f8e\u56fd\u6234\u5c14\uff08Dell\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4fdd\u62a4\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u652f\u6301\u81ea\u52a8\u548c\u96c6\u4e2d\u6267\u884c\u6240\u6709\u6b64\u7c7b\u6570\u636e\u7684\u6536\u96c6\u4e0e\u5206\u6790\uff0c\u5e76\u83b7\u5f97\u6570\u636e\u4fdd\u62a4\u73af\u5883\u548c\u6d3b\u52a8\u7684\u5355\u4e2a\u5168\u9762\u89c6\u56fe\u7b49\u3002\r\n\r\nDell EMC Data Protection Advisor 6.3 Patch 159\u4e4b\u524d\u7248\u672c\u548c6.4 Patch 110\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u786c\u7f16\u7801\u6570\u636e\u5e93\u8d26\u6237\u5e26\u6709\u7ba1\u7406\u6743\u9650\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u6570\u636e\u5e93\u7684\u8bbf\u95ee\u6743\u9650\u3002",
  "discovererName": "DELL",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sso.emc.com/sso/login.htm?CTAuthMode=BASIC",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-06712",
  "openTime": "2018-03-29",
  "patchDescription": "Dell EMC Data Protection Advisor\u662f\u7f8e\u56fd\u6234\u5c14\uff08Dell\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4fdd\u62a4\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u652f\u6301\u81ea\u52a8\u548c\u96c6\u4e2d\u6267\u884c\u6240\u6709\u6b64\u7c7b\u6570\u636e\u7684\u6536\u96c6\u4e0e\u5206\u6790\uff0c\u5e76\u83b7\u5f97\u6570\u636e\u4fdd\u62a4\u73af\u5883\u548c\u6d3b\u52a8\u7684\u5355\u4e2a\u5168\u9762\u89c6\u56fe\u7b49\u3002\r\n\r\nDell EMC Data Protection Advisor 6.3 Patch 159\u4e4b\u524d\u7248\u672c\u548c6.4 Patch 110\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u786c\u7f16\u7801\u6570\u636e\u5e93\u8d26\u6237\u5e26\u6709\u7ba1\u7406\u6743\u9650\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u6570\u636e\u5e93\u7684\u8bbf\u95ee\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Dell EMC Data Protection Advisor\u672c\u5730\u786c\u7f16\u7801\u51ed\u8bc1\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "DELL EMC Data Protection Advisor \u003c6.3 Patch 159",
      "DELL EMC Data Protection Advisor \u003c6.4 Patch 110"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-1206",
  "serverity": "\u4e2d",
  "submitTime": "2018-03-13",
  "title": "Dell EMC Data Protection Advisor\u672c\u5730\u786c\u7f16\u7801\u51ed\u8bc1\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2018-1206 (GCVE-0-2018-1206)

Vulnerability from cvelistv5 – Published: 2018-03-12 17:00 – Updated: 2024-08-05 03:51

Summary

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentially gain unauthorized access to the database. Note: The Datastore Service database cannot be accessed remotely using this account.

Severity

No CVSS data available.

CWE

Hardcoded Password Vulnerability

Assigner

dell mitre root

References

3 references

URL	Tags
http://seclists.org/fulldisclosure/2018/Mar/22	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040484	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/103376	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
n/a	Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110	Affected: Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110

Date Public

2018-03-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:49.014Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2018/Mar/22"
          },
          {
            "name": "1040484",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040484"
          },
          {
            "name": "103376",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103376"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110"
            }
          ]
        }
      ],
      "datePublic": "2018-03-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is \"apollosuperuser.\" An attacker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentially gain unauthorized access to the database. Note: The Datastore Service database cannot be accessed remotely using this account."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Hardcoded Password Vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-17T09:57:01.000Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://seclists.org/fulldisclosure/2018/Mar/22"
        },
        {
          "name": "1040484",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040484"
        },
        {
          "name": "103376",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103376"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "ID": "CVE-2018-1206",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is \"apollosuperuser.\" An attacker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentially gain unauthorized access to the database. Note: The Datastore Service database cannot be accessed remotely using this account."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Hardcoded Password Vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://seclists.org/fulldisclosure/2018/Mar/22",
              "refsource": "CONFIRM",
              "url": "http://seclists.org/fulldisclosure/2018/Mar/22"
            },
            {
              "name": "1040484",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040484"
            },
            {
              "name": "103376",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103376"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2018-1206",
    "datePublished": "2018-03-12T17:00:00.000Z",
    "dateReserved": "2017-12-06T00:00:00.000Z",
    "dateUpdated": "2024-08-05T03:51:49.014Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.