CVE-2016-0889

Critical

Published: 15/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before version 8.2.0 has a vulnerability that allows remote attackers to write to arbitrary files via a crafted pathname.

Risk Assessment

Attackers could exploit this vulnerability to modify or delete critical files, potentially leading to significant disruptions in system operation.

Recommendation

It is recommended to upgrade to version 8.2.0 or later to mitigate this vulnerability.

Original NVD description (English source)

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.