CVE-2018-7098

Description

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal.

Risk Information

Base Score
8.4
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.959

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-88NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-86NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-58NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-53NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-30NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.4.0-ga-22NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.3.0-ga-24NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.3.0-ga-17NCM
Vulnerabilities CVE-2018-7095 ,CVE-2018-7096 ,CVE-2018-7097 ,CVE-2018-7098 ,CVE-2018-7099 are affected in 3par_service_provider sp-4.2.0-gaNCM
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability (CVE-2018-7098)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234