CVE:CVE-2018-15771
CNNVD:CNNVD-201811-289
Dell EMC RecoverPoint和RecoverPoint for Virtual Machines都是美国戴尔（Dell）公司的产品。前者是一套灾难恢复和数据保护软件，后者是一套面向VMware环境的灾难恢复解决方案。
Dell EMC RecoverPoint 5.1.2.1之前版本和RecoverPoint for Virtual Machines 5.2.0.2之前版本中存在信息泄露漏洞。攻击者可借助Boxmgmt CLI利用该漏洞确定系统文件是否存在。
solution:Upgrade emc recoverpoint to a higher version than 5.1.2.1,and avoid the version (,5.1.2.1); Upgrade emc recoverpoint_for_virtual_machines to a higher version than 5.2.0.2,and avoid the version (,5.2.0.2)