Path traversal

2018-03-2314:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

JSON

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server’s URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings.

CPENameOperatorVersion
emc_idrac7lt2.52.52.52
emc_idrac8lt2.52.52.52

CPE	Name	Operator	Version
	emc_idrac7	lt	2.52.52.52
	emc_idrac8	lt	2.52.52.52

References

en.community.dell.com/techcenter/extras/m/white_papers/20485410