Medium severity4.4NVD Advisory· Published Feb 3, 2017· Updated Jul 10, 2026

CVE-2016-6648

Description

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may access this sensitive system file and compromise the affected system.

Affected products

Dell/Recoverpoint For Virtual Machines
cpe:2.3:a:dell:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*
Range: <=4.0
EMC Corporation/RecoverPoint2 versions
cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*range: <=4.4.1.0
- (no CPE)range: <4.4.1.1
EMC Corporation/Recoverpoint For Virtual Machinesllm-fuzzy
Range: <5.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/540058/30/0/threadednvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/95821nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037727nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000