CVE-2017-14384
In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2018-03-16
- Last modified
- 2024-09-16
- Weaknesses
- CWE-22
Affected products
References
- http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf
- http://www.securityfocus.com/bid/103467