CVE-2017-8007: Path Traversal
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8007?
CVE-2017-8007 is considered a high severity vulnerability due to its potential for unauthorized information access.
How do I fix CVE-2017-8007?
To remediate CVE-2017-8007, you should update the affected software to the latest patched version provided by Dell EMC.
What software is affected by CVE-2017-8007?
CVE-2017-8007 affects various Dell EMC products, including ViPR SRM, Storage Monitoring and Reporting, VNX Monitoring and Reporting, and M&R (Watch4Net) for SAS Solution Packs.
Can CVE-2017-8007 be exploited remotely?
Yes, CVE-2017-8007 can potentially be exploited remotely by attackers with access to the Webservice Gateway credentials.
What type of vulnerability is CVE-2017-8007?
CVE-2017-8007 is classified as a directory traversal vulnerability that allows unauthorized access to sensitive information.