Description
Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.
References
- 1031567 vdb-entry
- 72256 vdb-entry
- 20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities mailing-list