PT-2016-1755 · Emc · Emc Unisphere For Vmax Virtual Appliance

Publicado 2016-04-15 · Atualizado 2021-08-05 · CVE-2016-0889

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX Virtual Appliance versions prior to 8.2.0

Description The issue is related to an HTTP servlet in the vApp Manager component, which lacks sufficient input validation. This allows remote attackers to modify arbitrary files by providing a specially crafted pathname.

Recommendations For versions prior to 8.2.0, update to version 8.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vApp Manager component to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-01081

CVE-2016-0889

Produtos afetados

Emc Unisphere For Vmax Virtual Appliance

Referências · 6

• http://securitytracker.com/id/1035580 · Nota
• https://osv.dev/vulnerability/CVE-2016-0889 · Aviso do Fabricante
• http://seclists.org/bugtraq/2016/Apr/83 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01081 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-0889 · Nota de Segurança
• https://t.me/cvenotify/18689 · Publicação no Telegram