EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may access this sensitive system file and compromise the affected system.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Recoverpoint | Emc | * | 4.4.1.0 (including) |
| Recoverpoint_for_virtual_machines | Emc | * | 4.0 (including) |