Dell Storage Manager EmWebsiteServlet Directory Traversal (CVE-2017-10949)

An information disclosure vulnerability exists in the Dell Storage Manager. The vulnerability is due to an input validation error in doGet() method of the EmWebsiteServlet servlet. A remote, unauthenticated attacker could exploit the vulnerability by sending crafted packets to the target system.

from Check Point Update Services Advisories http://ift.tt/2wBeXyE

No comments:

Post a Comment

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...