CVE-2015-6852 Path traversal in n/a

What is CVE-2015-6852?

CVE-2015-6852 is a medium-severity path traversal vulnerability in n/a, published on 28 Dec 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.

Weakness: CWE-200

Which versions are affected by CVE-2015-6852?

It affects 1 product.

Products include Emc Secure Remote Services.

How do I fix CVE-2015-6852?

No fix has been published for CVE-2015-6852 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2015-6852 being exploited?

There is no known exploitation of CVE-2015-6852 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-0544 Weak cryptography in n/a Critical 9.3
• CVE-2015-0524 SQL injection in n/a High 7.5
• CVE-2015-0525 Command injection in n/a High 7.5
• CVE-2018-11080 Information disclosure in ESRS Virtual Edition High 7.3
• CVE-2015-0543 Weak cryptography in n/a Medium 5.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7p4m-jxwc-rxp7.