Vulnerability Details : CVE-2018-11050
Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol (AMQP) component. User credentials are sent unencrypted to the remote AMQP service. An unauthenticated attacker in the same network collision domain, could potentially sniff the password from the network and use it to access the component using the privileges of the compromised user.
Products affected by CVE-2018-11050
- cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*
- cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*
- cpe:2.3:a:dell:emc_networker:18.1.0.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-11050
0.22%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 42 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-11050
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.3
|
LOW | AV:A/AC:L/Au:N/C:P/I:N/A:N |
6.5
|
2.9
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2018-11050
-
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.Assigned by: nvd@nist.gov (Primary)
-
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-11050
-
http://www.securityfocus.com/bid/104963
Dell EMC NetWorker CVE-2018-11050 Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
http://seclists.org/fulldisclosure/2018/Jul/92
Full Disclosure: DSA-2018-120: Dell EMC NetWorker Clear-Text authentication over network vulnerabilityMailing List;Third Party Advisory
-
http://www.securitytracker.com/id/1041393
EMC NetWorker AMQP Flaw Lets Remote Users Monitoring the Network Obtain Passwords - SecurityTrackerThird Party Advisory;VDB Entry
Jump to