CVE-2015-4546: Path Traversal
Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other products, allows remote attackers to read arbitrary files via a crafted KCSOSCERRORPAGE parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4546?
CVE-2015-4546 has a moderate severity rating that indicates potential risks for sensitive information exposure.
How do I fix CVE-2015-4546?
To fix CVE-2015-4546, upgrade EMC RSA OneStep or RSA Certificate Manager to a version later than 6.9 build 559.
What systems are affected by CVE-2015-4546?
CVE-2015-4546 affects EMC RSA OneStep 6.9 before build 559 and RSA Certificate Manager through 6.9 build 558.
What type of vulnerability is CVE-2015-4546?
CVE-2015-4546 is a directory traversal vulnerability that allows remote attackers to access arbitrary files.
Can CVE-2015-4546 be exploited remotely?
Yes, CVE-2015-4546 can be exploited remotely via a crafted KCSOSC_ERROR_PAGE parameter.