Path Traversal in Emc Data Protection Advisor

CVE-2012-4616

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.

Affected products

Emc Data_protection_advisor — versions 5.6, 5.7, 5.8
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)