PT-2017-9530 · Emc · Emc Data Protection Advisor

Published 2017-02-03 · Updated 2020-01-23 · CVE-2016-8211

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 6.1.x through 6.2.3 prior to patch 446

Description The issue is related to a path traversal vulnerability that could potentially be exploited by malicious users to compromise the affected system. This vulnerability may allow for directory traversal and information disclosure.

Recommendations For EMC Data Protection Advisor versions 6.1.x through 6.2.3, apply patch 446 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-8211

ZDI-17-394

Affected Products

Emc Data Protection Advisor

References · 6

• https://osv.dev/vulnerability/CVE-2016-8211 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-8211 · Security Note
• http://securitytracker.com/id/1037729 · Note
• http://securityfocus.com/archive/1/540067/30/0/threaded · Note
• http://securityfocus.com/bid/95833 · Note