CVE-2008-2512

CWE-22 — Path Traversal3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.9%
top 24.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Backupexec System Recovery
Timeline
PublishedJun 2
Latest updateMay 1

Description

Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: securityresponse.symantec.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jmv3-p5rx-7xp8: Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7↗2022-05-01
▶
CVEList
CVE-2008-2512: Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7↗2008-06-02
▶
CVE-2008-2512 (MEDIUM CVSS 5) | Directory traversal vulnerability i | cvebase.io