Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

DB:MYSQL:CVE-2018-15768-CE

Severity

Major

Recommended

Yes

Recommended Action

Drop

Category

DB

Keywords

Dell OpenManage Network Manager MySQL Improper Access Control Command Execution

Release Date

2018/12/06

Update Number

3123

Supported Platforms

idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

DB: Dell OpenManage Network Manager MySQL Improper Access Control Command Execution


This signature detects attempts to exploit a known vulnerability against Dell OpenManage Network Manager MySQL. A successful attack can lead to arbitrary command execution.

Extended Description

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.

References

  • CVE: CVE-2018-15768
  • URL: https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities
  • URL: https://korelogic.com/resources/advisories/kl-001-2018-009.txt

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out