CVE-2015-4527

HIGH · 7.8 CVSS Gepubliceerd: 23-07-2015 CWE-200

Beschrijving

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters.

Vendors

Emc

Affected products

Avamar Server Avamar Server Virtual Edition

References

seclists.org
www.securitytracker.com