CVE-2015-6852 Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc secure remote services | = 3.0 | No fix listed |
| emc secure remote services | = 3.02 | No fix listed |
| emc secure remote services | = 3.03 | No fix listed |
References
- packetstormsecurity.com
- 20151222 ESA-2015-179: EMC Secure Remote Services Virtual Edition Path Traversal Vulnerability mailing-list
- 79661 vdb-entry
- 1034530 vdb-entry