Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Dell EMC PowerProtect 安全漏洞
Vulnerability Description
Dell EMC PowerProtect是美国戴尔（Dell）公司的一个应用软件。提供公司用来保护，管理和恢复其最关键的应用程序数据。 Dell EMC PowerProtect Cyber Recovery 19.11 之前的版本存在安全漏洞，该漏洞源于经过身份验证的低权限用户可以链接 docker 命令将权限升级到 root，从而导致完全系统接管，攻击者利用该漏洞可以获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A