In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDell Emc M\&r
APPDellwszystkie wersjeDell Emc Storage Monitoring And Reporting
APPDellwszystkie wersjeDell Emc Vipr Srm
APPDell≤ 4.0.2Dell Emc Vnx Monitoring And Reporting
APPDellwszystkie wersje
Powiązane podatności
RCE przez deserializację Java RMI w Dell EMC Storage Monitoring and Reporting
XXE Injection w komponentach ECOM systemów Dell EMC (RCE/ujawnienie danych)
Ukryte konta z domyślnymi hasłami w produktach Dell EMC M&R i ViPR SRM
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensi...
Dell RecoverPoint for VMs — zahardkodowane dane uwierzytelniające (RCE, root)