« Volver al listado

CVE-2012-4616

Estado: ModificadaMedia (5)—

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Data Protection Advisor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4616",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-26T20:55:00.767",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0125.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0125.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de salto de directorio en la interfaz de usuario web de EMC Data Protection Advisor (DPA) v5.6 hasta SP1, v5.7 SP1 hasta SP1, y v5.8 hasta SP4, que permite a atacantes remotos leer archivos de su elección a través de vectores no especificados.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:45:30.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E71E518A-F416-4850-9F2B-7E93CD975381"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.6:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "925F0652-1C6D-497B-ADF0-4248C0B2533F"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30116207-86BD-4384-87C3-7919340DB5D3"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.7:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28572343-8AAB-4249-9FA6-001757B83061"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73341E0C-5EB7-45C9-9068-A77054704A2A"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.8:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D72AB885-317E-4DF4-8FEF-689DCE3BCA92"
            },
            {
              "criteria": "cpe:2.3:a:emc:data_protection_advisor:5.8:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A905E0F-8F4C-4008-9E78-CE394A79F00B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}