EMC Data Protection Advisor 6.2 < 6.4 Patch B180 / < 6.5 patch B51 (DSA-2018-112).

high Nessus Plugin ID 112193

Language:

Synopsis

The remote application may be affected by XML External Entity Vulnerability.

Description

According to its self-reported version, the application is 6.2 < 6.4 Patch B180 or 6.5 < 6.5 patch B51. It is, therefore, affected by an XML external entity vulnerability vulnerability.

Solution

Upgrade EMC Data Protection Advisor to version 6.4 Patch B180 or 6.5 patch B51 or later.

Plugin Details

Severity: High

ID: 112193

File Name: emc_dpa_6_5_0_103604.nasl

Version: 1.6

Type: remote

Family: Misc.

Published: 8/31/2018

Updated: 7/17/2020

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:P

CVSS Score Source: CVE-2018-11048

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:emc:data_protection_advisor

Required KB Items: installed_sw/EMC Data Protection Advisor

Exploit Ease: No known exploits are available

Patch Publication Date: 7/27/2018

Vulnerability Publication Date: 8/3/2018

Reference Information

CVE: CVE-2018-11048

BID: 105130

IAVB: 2018-B-0118-S

Detections

Analytics