CVE-2017-15550
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal.
| Software | From | Fixed in |
|---|---|---|
| emc / integrated_data_protection_appliance | 2.0 | 2.0.x |
| emc / networker | 9.2 | 9.2.x |
| emc / networker | 9.1 | 9.1.x |
| emc / networker | 9.0 | 9.0.x |
| emc / avamar_server | 7.5-183 | 7.5-183.x |
| emc / avamar_server | 7.4-242 | 7.4-242.x |
| emc / avamar_server | 7.4-58-sp1 | 7.4-58-sp1.x |
| emc / avamar_server | 7.3-211 | 7.3-211.x |
| emc / avamar_server | 7.3-226 | 7.3-226.x |
| emc / avamar_server | 7.3-233 | 7.3-233.x |
| emc / avamar_server | 7.3-125-sp1 | 7.3-125-sp1.x |
| emc / avamar_server | 7.2-309 | 7.2-309.x |
| emc / avamar_server | 7.2-401 | 7.2-401.x |
| emc / avamar_server | 7.2-32-sp1 | 7.2-32-sp1.x |
| emc / avamar_server | 7.1-302 | 7.1-302.x |
| emc / avamar_server | 7.1-370 | 7.1-370.x |
| emc / avamar_server | 7.1-145-sp1 | 7.1-145-sp1.x |
| emc / avamar_server | 7.1-21-sp2 | 7.1-21-sp2.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime