NetSight
medium6.7

CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabiliti…

Impact

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.

Affected products

VendorProductAffected versions
DellRecoverpoint For Virtual Machines
through 4.0
EmcRecoverpoint
through 4.4.1.0

Weakness classification

References