PT-2015-6607 · Emc · Emc Avamar Virtual Addition+2

Publicado 2015-07-23 · Atualizado 2015-08-21 · CVE-2015-4527

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions 7.0 through 7.1.2 EMC Avamar Virtual Addition (AVE) versions 7.0 through 7.1.2

Description A directory traversal issue allows remote attackers to read arbitrary files by sending crafted parameters through the Avamar Desktop/Laptop client interface.

Recommendations For EMC Avamar Server versions 7.0 through 7.1.2, update to version 7.1.2 or later. For EMC Avamar Virtual Addition (AVE) versions 7.0 through 7.1.2, update to version 7.1.2 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-4527

Produtos afetados

Avamar Desktop/Laptop Client

Emc Avamar Server

Emc Avamar Virtual Addition

Referências · 3

• http://securitytracker.com/id/1033026 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4527 · Nota de Segurança
• http://seclists.org/bugtraq/2015/Jul/110 · Nota