CVE-2019-18582: critical vulnerability in Dell Data Protection Advisor
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Dell EMC Data Protection Advisor allows administrators to inject malicious code through report generation, which can execute commands on the server. This is dangerous because attackers with admin access can take control of the system.
Server-side template injection vulnerability in the REST API allows authenticated administrators to inject arbitrary code into report generation scripts, leading to OS command execution with the privileges of the DPA service user. Attack vector requires valid administrative credentials and interaction with the affected REST API endpoint.
In the same product, most dangerous first.