CVE-2017-14384 In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerab...
MediumCVSS 6.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Storage Manager | < 16.3.20 | 16.3.20 |
| Dell EMC Dell Storage Manager | = earlier than 16.3.20 | No fix listed |
References
- topics-cdn.dell.com vendor-advisory
- 103467 third-party-advisory vdb-entry