Back to search
CVE-2017-10949
Published: Aug 4, 2017
Modified: Sep 16, 2024
PUBLISHED
Description
Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459.
| Vendor | Product | Versions |
|---|---|---|
Zero Day Initiative | Dell Storage Manager | affected 2016 R2.1 |
References
http://www.zerodayinitiative.com/advisories/ZDI-17-523
x_refsource_MISC
100138
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now