Lucene search
K

EMC M&R (Watch4net) Device Discovery Path Traversal

🗓️ 20 Mar 2015 00:00:00Reported by Han SahinType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 41 Views

EMC M&R (Watch4net) Device Discovery Path Traversal vulnerability in versions prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1 allows path traversal, providing unauthorized access to sensitive files

Related
Code
`------------------------------------------------------------------------  
Path traversal vulnerability in EMC M&R (Watch4net) Device Discovery  
------------------------------------------------------------------------  
Han Sahin, November 2014  
  
------------------------------------------------------------------------  
Abstract  
------------------------------------------------------------------------  
A path traversal vulnerability was found in EMC M&R (Watch4net) Device  
Discovery. This vulnerability allows an attacker to access sensitive  
files containing configuration data, passwords, database records, log  
data, source code, and program scripts and binaries.  
  
------------------------------------------------------------------------  
Affected products  
------------------------------------------------------------------------  
EMC reports that the following products are affected by this  
vulnerability:  
  
- EMC M&R (Watch4Net) versions prior 6.5u1  
- EMC ViPR SRM versions prior to 3.6.1  
  
------------------------------------------------------------------------  
See also  
------------------------------------------------------------------------  
- CVE-2016-0516  
- ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities  
  
------------------------------------------------------------------------  
Fix  
------------------------------------------------------------------------  
EMC released the following updated versions that resolve this  
vulnerability:  
  
- EMC M&R (Watch4Net) 6.5u1  
- EMC ViPR SRM 3.6.1  
  
Registered customers can download upgraded software from support.emc.com  
at https://support.emc.com/downloads/34247_ViPR-SRM.  
  
------------------------------------------------------------------------  
Details  
------------------------------------------------------------------------  
https://www.securify.nl/advisory/SFY20141106/path_traversal_vulnerability_in_emc_m_r__watch4net__device_discovery.html  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Mar 2015 00:00Current
0.4Low risk
Vulners AI Score0.4
EPSS0.21436
41