Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-14384

Опубликовано: 16 мар. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*
Версия до 16.3.20 (исключая)

EPSS

Процентиль: 89%
0.04601
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.

EPSS

Процентиль: 89%
0.04601
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22