Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0516
Reference (s):
- BID:72255
- URL: http://www.securityfocus.com/bid/72255
- BUGTRAQ:20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities
- URL: http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
- BUGTRAQ:20150318 Path traversal vulnerability in EMC M&R (Watch4net) MIB Browser