Dell Storage Manager EMConfigMigration Service Directory Traversal Vulnerability

Dell Storage Manager is an application for managing and monitoring multiple Storage Center, PS Series portfolio FluidFS from Dell USA. A directory traversal vulnerability exists in the EMConfigMigration service in Dell Storage Manager versions prior to 16.3.20. A remote attacker could exploit the...

Directory traversal

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of th...

CVE-2017-14384

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of th...

CVE-2017-14384

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of th...

CVE-2017-14384

Dell Storage Manager (pre-16.3.20) is affected by a directory traversal in the EMConfigMigration servlet/service. The flaw arises from insufficient input validation, allowing remote attackers to read unauthorized files by supplying crafted input parameters (no file deletion/modification). ZDI not...

CVE-2017-14384: Improper Limitation of a Pathname to a Restricted Directory

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of th...

Dell EMC Storage Manager EmConfigMigration Servlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Dell EMC Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EmConfigMigration servlet, which listens on TCP port 3033 by...

PT-2018-5629

Name of the Vulnerable Software and Affected Versions: Dell Storage Manager versions prior to 16.3.20 Description: The issue affects the EMConfigMigration service, allowing a remote malicious user to potentially exploit a directory traversal vulnerability. This could enable the user to read...