An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.Referenceshttp://www.securitytracker.com/id/1035580http://seclists.org/bugtraq/2016/Apr/83