CVE-2016-0889 in Unisphere for VMAX Virtual Appliance

الملخص

بحسب MITRE

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.

Once again VulDB remains the best source for vulnerability data.

• حجز: 16/12/2015
• إفشاء: 15/04/2016
• الاعتدال: تمت الموافقة
• إدخال: VDB-82446
• CPE: جاهز
• CWE: CWE-20 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.03139
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0889
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0889
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0889/