CVE-2015-4527

2015-07-2314:59:01

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters.

Affected configurations

Nvd

Node

emcavamar_serverMatch7.1

emcavamar_server_virtual_editionMatch7.1

VendorProductVersionCPE
emcavamar_server7.1cpe:2.3:a:emc:avamar_server:7.1:*:*:*:*:*:*:*
emcavamar_server_virtual_edition7.1cpe:2.3:a:emc:avamar_server_virtual_edition:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	avamar_server	7.1	cpe:2.3:a:emc:avamar_server:7.1:::::::*
emc	avamar_server_virtual_edition	7.1	cpe:2.3:a:emc:avamar_server_virtual_edition:7.1:::::::*