Description (CNA)
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / EMC Data Protection Advisor prior to 6.4 | affected EMC Data Protection Advisor prior to 6.4 |
CWE
No CWE identifiers supplied.
References
- http://seclists.org/fulldisclosure/2017/Jul/12
- http://www.securitytracker.com/id/1038841
- http://www.securityfocus.com/bid/99487
ADP enrichment
No English description supplied.