Path Traversal in Hp Data_protector
CVE-2014-5160
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 req…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.247 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Hp Data_protector — versions 6.10, 6.11
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
Frequently asked questions
- What is CVE-2014-5160?
- CVE-2014-5160 is a vulnerability in Hp Data_protector, classified under Path Traversal. Published 2014-08-01.
- Is CVE-2014-5160 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.