CVE-2012-1841 Path traversal in n/a
Remote attackers can read arbitrary files on Quantum Scalar i500 and Dell ML6000 tape libraries via path traversal in logShow.htm.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-1841?
CVE-2012-1841 is a medium-severity path traversal vulnerability in n/a, published on 22 Mar 2012. It can be exploited over the network, with no action from the victim.
Official description
Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Weakness: CWE-22
Which versions are affected by CVE-2012-1841?
It affects 7 products.
Products include Dell Powervault Ml6000, Dell Powervault Ml6000 Firmware, Dell Powervault Ml6010, Dell Powervault Ml6020, Dell Powervault Ml6030, Quantum Scalar I500 and 1 more.
How do I fix CVE-2012-1841?
No fix has been published for CVE-2012-1841 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2012-1841 being exploited?
There is no known exploitation of CVE-2012-1841 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wqw6-p8w6-3g29.