PT-2017-18061 · Emc · Emc Data Protection Advisor

Publicado 2017-07-09 · Atualizado 2017-08-25 · CVE-2017-8003

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions prior to 6.4

Description The issue allows a remote authenticated high privileged user to potentially access unauthorized information from the underlying OS server. This can be achieved by supplying specially crafted strings in input parameters of the application.

Recommendations For versions prior to 6.4, update to version 6.4 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-8003

ZDI-17-711

Produtos afetados

Emc Data Protection Advisor

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-8003 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-17-711 · Nota de Segurança
• http://securitytracker.com/id/1038841 · Nota
• http://securityfocus.com/bid/99487 · Nota
• https://osv.dev/vulnerability/CVE-2017-8003 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2017/Jul/12 · Nota