CVE-2015-0515 File upload in n/a

What is CVE-2015-0515?

CVE-2015-0515 is a medium-severity vulnerability in n/a, published on 21 Jan 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.

Which versions are affected by CVE-2015-0515?

It affects 2 products.

Products include Emc Vipr Srm, Emc Watch4net.

How do I fix CVE-2015-0515?

No fix has been published for CVE-2015-0515 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-0515 being exploited?

There is no known exploitation of CVE-2015-0515 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-0922 Auth bypass in n/a Critical 9.8
• CVE-2016-0891 Cross-site request forgery in n/a High 8.8
• CVE-2016-6641 Cross-site scripting in n/a High 7.6
• CVE-2016-6642 Cross-site request forgery in n/a Medium 6.1
• CVE-2016-6643 Cross-site scripting in n/a Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xphm-84c2-8fw4.