CVE-2017-14384

Dell Storage Manager (pre-16.3.20) is affected by a directory traversal in the EMConfigMigration servlet/service. The flaw arises from insufficient input validation, allowing remote attackers to read unauthorized files by supplying crafted input parameters (no file deletion/modification). ZDI not...