Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/MAPG-8NVRPY | US Government Resource |
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 | US Government Resource |
http://www.kb.cert.org/vuls/id/913483 | US Government Resource |
http://secunia.com/advisories/48453 | |
http://secunia.com/advisories/48403 | |
http://osvdb.org/80226 |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Information
Published : 2012-03-22 03:17
Updated : 2018-01-09 18:29
NVD link : CVE-2012-1841
Mitre link : CVE-2012-1841
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
dell
- powervault_ml6010
- powervault_ml6020
- powervault_ml6000
- powervault_ml6000_firmware
- powervault_ml6030
quantum
- scalar_i500_firmware
- scalar_i500