Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2018-11050
PUBLISHED
More InfoOfficial Page
Assigner-dell
Assigner Org ID-c550e75a-17ff-4988-97f0-544cde3820fe
View Known Exploited Vulnerability (KEV) details
Published At-01 Aug, 2018 | 06:00
Updated At-16 Sep, 2024 | 19:51
Rejected At-
▼CVE Numbering Authority (CNA)

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol (AMQP) component. User credentials are sent unencrypted to the remote AMQP service. An unauthenticated attacker in the same network collision domain, could potentially sniff the password from the network and use it to access the component using the privileges of the compromised user.

Affected Products
Vendor
Dell Inc.Dell EMC
Product
Networker
Versions
Affected
  • 9.0
  • 18.1.0.1
  • From 9.1.1.X through 9.1.1.8 (custom)
  • From 9.2.1.X through 9.2.1.3 (custom)
Problem Types
TypeCWE IDDescription
textN/AClear-Text authentication over network vulnerability
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securityfocus.com/bid/104963
vdb-entry
x_refsource_BID
http://www.securitytracker.com/id/1041393
vdb-entry
x_refsource_SECTRACK
http://seclists.org/fulldisclosure/2018/Jul/92
mailing-list
x_refsource_FULLDISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securityfocus.com/bid/104963
vdb-entry
x_refsource_BID
x_transferred
http://www.securitytracker.com/id/1041393
vdb-entry
x_refsource_SECTRACK
x_transferred
http://seclists.org/fulldisclosure/2018/Jul/92
mailing-list
x_refsource_FULLDISC
x_transferred
Details not found