Path Traversal in Emc Vplex Geosynchrony

CVE-2014-0632

Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

Emc Vplex_geosynchrony — versions 4.0, 5.0, 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security_alert@emc.com (vdb-entry, x_refsource_BID)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)