Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
| Software | From | Fixed in |
|---|---|---|
| emc / appsync | - | 2.0.x |
| emc / replication_manager | 5.3 | 5.3.x |
| emc / replication_manager | - | 5.5.2.x |
| emc / replication_manager | 5.5.1 | 5.5.1.x |
| emc / replication_manager | 5.5 | 5.5.x |
| emc / replication_manager | 5.1 | 5.1.x |
| emc / replication_manager | 5.2 | 5.2.x |
| emc / replication_manager | 5.4 | 5.4.x |
| emc / replication_manager | 5.4.3 | 5.4.3.x |
| emc / replication_manager | 5.0 | 5.0.x |