CVE-2017-10949

EPSS 5.4%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 5.4%KEV nãoPoC —Patch —

Lifecycle

04 Aug 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459.

Affected products

Zero Day Initiative · Dell Storage Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://topics-cdn.dell.com/pdf/dell-compellent-sc8000_release%20notes24_en-us.pdf http://www.securityfocus.com/bid/100138 http://www.zerodayinitiative.com/advisories/ZDI-17-523