CVE-2019-18577 Privilege escalation in XtremIO
A local user with xinstall privileges can exploit incorrect permissions to gain root access on Dell EMC XtremIO XMS.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18577?
CVE-2019-18577 is a medium-severity vulnerability in Dell XtremIO, published on 13 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local user with XtremIO xinstall privileges may exploit this vulnerability to gain root access.
Weakness: CWE-732
Which versions are affected by CVE-2019-18577?
It affects 1 product.
Products include Dell Xtremio Management Server.
How do I fix CVE-2019-18577?
No fix has been published for CVE-2019-18577 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-18577 being exploited?
There is no known exploitation of CVE-2019-18577 in the wild and no public exploit code.
Other vulnerabilities in Dell XtremIO
Sources
Also known as GHSA-v4c9-m2xc-g9cx.