CVE-2016-0889 in Unisphere for VMAX Virtual Appliance

Riassunto

di MITRE

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 16/12/2015
• Divulgazione: 15/04/2016
• Moderazione: accettato
• Voce: VDB-82446
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.03139
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0889
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0889
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0889/