CVE-2017-8007: Path Traversal
First published: Fri Sep 22 2017(Updated: )
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC M&R | ||
| Dell EMC VNX Monitoring And Reporting | ||
| Dell EMC ViPR SRM | <=4.0.2 | |
| Dell EMC VNX Monitoring And Reporting |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8007?
CVE-2017-8007 is considered a high severity vulnerability due to its potential for unauthorized information access.
How do I fix CVE-2017-8007?
To remediate CVE-2017-8007, you should update the affected software to the latest patched version provided by Dell EMC.
What software is affected by CVE-2017-8007?
CVE-2017-8007 affects various Dell EMC products, including ViPR SRM, Storage Monitoring and Reporting, VNX Monitoring and Reporting, and M&R (Watch4Net) for SAS Solution Packs.
Can CVE-2017-8007 be exploited remotely?
Yes, CVE-2017-8007 can potentially be exploited remotely by attackers with access to the Webservice Gateway credentials.
What type of vulnerability is CVE-2017-8007?
CVE-2017-8007 is classified as a directory traversal vulnerability that allows unauthorized access to sensitive information.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/dell
- canonical/dell emc m&r
- canonical/dell emc vnx monitoring and reporting
- canonical/dell emc vipr srm
- version/dell emc vipr srm/4.0.2