CVE-2015-4527 Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/L...
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc avamar server | = 7.1 | No fix listed |
| emc avamar server virtual edition | = 7.1 | No fix listed |
References
- 20150722 ESA-2015-118: EMC Avamar Directory Traversal Vulnerability mailing-list
- 1033026 vdb-entry