CVE-2017-8007

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.

• CWE-22

• http://seclists.org/fulldisclosure/2017/Sep/51Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100957Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039417Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039418Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Sep/51Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100957Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039417Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039418Third Party Advisory, VDB Entry

Published

Sep 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8001An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux e…8.4
• CVE-2017-8002EMC Data Protection Advisor prior to 6.4 contains multiple b…
• CVE-2017-8003EMC Data Protection Advisor prior to 6.4 contains a path tra…
• CVE-2017-8004The EMC RSA Identity Governance and Lifecycle, RSA Via Lifec…
• CVE-2017-8005The EMC RSA Identity Governance and Lifecycle, RSA Via Lifec…
• CVE-2017-8006In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlie…
• CVE-2017-8008Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-8009Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-8010Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-8011EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS …9.8
• CVE-2017-8012In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) f…7.4
• CVE-2017-8013EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x …