Lucene search

K
cveDellCVE-2015-6852
HistoryDec 28, 2015 - 3:59 p.m.

CVE-2015-6852

2015-12-2815:59:01
CWE-200
dell
web.nvd.nist.gov
21
cve-2015-6852
directory traversal vulnerability
api
emc secure remote services
remote authenticated users
log files

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

0.002

Percentile

52.8%

Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.

Affected configurations

Nvd
Node
emcsecure_remote_servicesMatch3.0virtual
OR
emcsecure_remote_servicesMatch3.02virtual
OR
emcsecure_remote_servicesMatch3.03virtual
VendorProductVersionCPE
emcsecure_remote_services3.0cpe:2.3:a:emc:secure_remote_services:3.0:*:*:*:virtual:*:*:*
emcsecure_remote_services3.02cpe:2.3:a:emc:secure_remote_services:3.02:*:*:*:virtual:*:*:*
emcsecure_remote_services3.03cpe:2.3:a:emc:secure_remote_services:3.03:*:*:*:virtual:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

0.002

Percentile

52.8%

Related for CVE-2015-6852