CVE-2018-18657 An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImp...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arcserve udp | = 6.0 | No fix listed |
| arcserve udp | = 6.0-1 | No fix listed |
| arcserve udp | = 6.0-2 | No fix listed |
| arcserve udp | = 6.0-3 | No fix listed |
| arcserve udp | = 6.5 | No fix listed |
| arcserve udp | = 6.5-1 | No fix listed |
| arcserve udp | = 6.5-2 | No fix listed |
| arcserve udp | = 6.5-3 | No fix listed |
| arcserve udp | = 6.5-4 | No fix listed |
References
- support.arcserve.com patch vendor-advisory
- support.arcserve.com patch vendor-advisory
- www.digitaldefense.com third-party-advisory