CVE-2019-18581

CRITICAL Year: 2019
CVSS v3 Score
9.1
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-862
View all →

Vulnerability Description

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.

Related Vulnerabilities

CVE-2018-10866

CRITICAL
CVSS:9.1(Critical)

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file wi...

CWE-8622018

CVE-2018-7702

CRITICAL
CVSS:9.1(Critical)

SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and a...

CWE-8622018

CVE-2019-19885

CRITICAL
CVSS:9.1(Critical)

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorizatio...

CWE-8622019

CVE-2020-19038

CRITICAL
CVSS:9.1(Critical)

File Deletion vulnerability in Halo 0.4.3 via delBackup.

CWE-8622020

CVE-2020-1963

CRITICAL
CVSS:9.1(Critical)

Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.

CWE-8622020

CVE-2020-25359

CRITICAL
CVSS:9.1(Critical)

An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFil...

CWE-8622020