Path traversal

2012-03-2210:17:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

JSON

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.

CPENameOperatorVersion
powervault_ml6000eq32.0.117
powervault_ml6000eq41.0.117
powervault_ml6000_firmwareeq585.0.0-g-gs3
powervault_ml6010eq5.0.117
powervault_ml6020eq14.0.117
powervault_ml6030eq23.0.117
scalar_i500eq5.0.117
scalar_i500eq14.0.117
scalar_i500eq23.0.117
scalar_i500_firmwareeq<= i7.0.2

Name	Operator	Version
powervault_ml6000	eq	32.0.117
powervault_ml6000	eq	41.0.117
powervault_ml6000_firmware	eq	585.0.0-g-gs3
powervault_ml6010	eq	5.0.117
powervault_ml6020	eq	14.0.117
powervault_ml6030	eq	23.0.117
scalar_i500	eq	5.0.117
scalar_i500	eq	14.0.117
scalar_i500	eq	23.0.117
scalar_i500_firmware	eq	<= i7.0.2