EMC Data Protection Advisor Directory Traversal and SQL Injection Vulnerabilities

Bugtraq ID:	99487
Class:	Input Validation Error
CVE:	CVE-2017-8002 CVE-2017-8003
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	rgod
Vulnerable:	EMC Data Protection Advisor 6.2.4 EMC Data Protection Advisor 6.2.3 EMC Data Protection Advisor 6.2.2 EMC Data Protection Advisor 6.2.1 EMC Data Protection Advisor 6.1 EMC Data Protection Advisor 6.3 EMC Data Protection Advisor 6.2 EMC Data Protection Advisor 6.0 EMC Data Protection Advisor 5.8 EMC Data Protection Advisor 5.7.1 EMC Data Protection Advisor 5.7 EMC Data Protection Advisor 5.6
Not Vulnerable:	EMC Data Protection Advisor 6.4

EMC Data Protection Advisor Directory Traversal and SQL Injection Vulnerabilities

EMC Data Protection Advisor is prone to a directory-traversal vulnerability and multiple SQL-injection vulnerabilities.

A remote attacker could exploit the vulnerability to access data, or exploit latent vulnerabilities in the underlying database or use directory-traversal characters ('../') to access arbitrary files that contain sensitive information.

EMC Data Protection Advisor versions prior to 6.4 are vulnerable.

EMC Data Protection Advisor Directory Traversal and SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

EMC Data Protection Advisor Directory Traversal and SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC Data Protection Advisor Directory Traversal and SQL Injection Vulnerabilities

References:

• EMC Data Protection Advisor Homepage (EMC)
  
• EMC Homepage (EMC)
  
• ESA-2017-075: EMC Data Protection Advisor MultipleVulnerabilities (Seclist.org)