Lucene search

K
cveDellCVE-2015-4527
HistoryJul 23, 2015 - 2:59 p.m.

CVE-2015-4527

2015-07-2314:59:01
CWE-200
dell
web.nvd.nist.gov
35
cve
2015
4527
directory traversal
vulnerability
emc
avamar server

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.7%

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters.

Affected configurations

Nvd
Node
emcavamar_serverMatch7.1
OR
emcavamar_server_virtual_editionMatch7.1
VendorProductVersionCPE
emcavamar_server7.1cpe:2.3:a:emc:avamar_server:7.1:*:*:*:*:*:*:*
emcavamar_server_virtual_edition7.1cpe:2.3:a:emc:avamar_server_virtual_edition:7.1:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.7%

Related for CVE-2015-4527