Directory Traversal Vulnerability in Dell Storage Manager

CVE-2017-14384

What is CVE-2017-14384?

A directory traversal vulnerability exists in Dell Storage Manager versions prior to 16.3.20. This flaw allows an unauthorized remote user to exploit the EMConfigMigration service by submitting specially crafted input parameters. Successful exploitation could enable the attacker to read sensitive files outside the designated directories, compromising the application's security. However, it should be noted that no file deletion or modification can occur through this vulnerability.

References