CVE-2018-15774

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.

• CWE-863

• http://www.securityfocus.com/bid/106233Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/us/en/19/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-15774-and-cve-2018-15776-?lang=enVendor Advisory
• http://www.securityfocus.com/bid/106233Third Party Advisory, VDB Entry
• https://www.dell.com/support/article/us/en/19/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-15774-and-cve-2018-15776-?lang=enVendor Advisory

Published

Dec 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15768Dell OpenManage Network Manager versions prior to 6.5.0 enab…
• CVE-2018-15769RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4…7.5
• CVE-2018-15770Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15771Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverP…
• CVE-2018-15772Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverP…
• CVE-2018-15773Dell Encryption (formerly Dell Data Protection | Encryption)…
• CVE-2018-15775Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15776Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain …6.4
• CVE-2018-15777Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15778Dell OS10 versions prior to 10.4.2.1 contain a vulnerability…8.8
• CVE-2018-15779Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-15780RSA Archer versions prior to 6.5.0.1 contain an improper acc…4.3