high8.8
CVE-2017-15550
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Dat…
Impact
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Avamar Server | Versions 7.1-21, 7.1-145, 7.1-302, 7.1-370, 7.2-32, 7.2-309 |
| Emc | Integrated Data Protection Appliance | Version 2.0 |
| Emc | Networker | Versions 9.0, 9.1, 9.2 |