CVE-2017-8007
HighSummary
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, there is a directory traversal vulnerability in the Webservice Gateway. Attackers with knowledge of Webservice Gateway credentials could exploit this vulnerability to gain unauthorized access to information and modify or delete data.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data and the potential for modification or deletion of that data, which could lead to serious legal and financial consequences.
Recommendation
It is recommended to secure the Webservice Gateway by updating the software and implementing appropriate access controls to mitigate the risk of this vulnerability.
Other vulnerabilities in EMC ViPR SRM, Storage M&R, VNX M&R, M&R (Watch4Net) for SAS Solution Packs
Original NVD description (English source)
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS