CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentially gain unauthorized access to the database. Note: The Datastore Service database cannot be accessed remotely using this account.

• CWE-798

• http://seclists.org/fulldisclosure/2018/Mar/22Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/103376Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040484Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Mar/22Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/103376Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040484Third Party Advisory, VDB Entry

Published

Mar 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12051Arbitrary File Upload and Remote Code Execution exist in PHP…
• CVE-2018-12052SQL Injection exists in PHP Scripts Mall Schools Alert Manag…
• CVE-2018-12053Arbitrary File Deletion exists in PHP Scripts Mall Schools A…
• CVE-2018-12054Arbitrary File Read exists in PHP Scripts Mall Schools Alert…
• CVE-2018-12055Multiple SQL Injections exist in PHP Scripts Mall Schools Al…
• CVE-2018-12056The maxRandom function of a smart contract implementation fo…
• CVE-2018-12062The sell function of a smart contract implementation for Swf…
• CVE-2018-12063The sell function of a smart contract implementation for Int…
• CVE-2018-12064tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr:…
• CVE-2018-12065A Local File Inclusion vulnerability in /system/WCore/WHelpe…
• CVE-2018-12066BIRD Internet Routing Daemon before 1.6.4 allows local users…
• CVE-2018-12067The sell function of a smart contract implementation for Sub…