CVE-2016-0889: Input Validation
Published Apr 15, 2016
·Updated
An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.
Affected Software
1 affected component
Dell Emc Unisphere Vmax<=8.1
Event History
Apr 15, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0889?
CVE-2016-0889 has been classified as a medium severity vulnerability due to its potential for remote file writing capabilities.
2
How do I fix CVE-2016-0889?
To fix CVE-2016-0889, upgrade to EMC Unisphere for VMAX Virtual Appliance version 8.2.0 or later.
3
What types of attacks does CVE-2016-0889 allow?
CVE-2016-0889 allows remote attackers to write to arbitrary files, potentially compromising system integrity.
4
Which versions of EMC Unisphere are affected by CVE-2016-0889?
Versions of EMC Unisphere for VMAX before 8.2.0, specifically up to 8.1, are affected by CVE-2016-0889.
5
Is CVE-2016-0889 a local or remote vulnerability?
CVE-2016-0889 is a remote vulnerability, allowing attackers to exploit it over the network.