CVE-2017-8003
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of the application.
- Score
- CVSS 3.0 4.9 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2017-07-09
- Last modified
- 2024-08-05
- Weaknesses
- CWE-22
Affected products
References
- http://seclists.org/fulldisclosure/2017/Jul/12
- http://www.securityfocus.com/bid/99487
- http://www.securitytracker.com/id/1038841
