EMC VMAX3 VASA Provider UploadConfigurator Directory Traversal (CVE-2017-4997)

A directory traversal vulnerability exists in the EMC VMAX3 VASA Provider Virtual Appliance. The issue results from the servlet UploadConfigurator serving files that have been uploaded by a user. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target server.

from Check Point Update Services Advisories http://ift.tt/2xDUlb8

No comments:

Post a Comment

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...