Design/Logic Flaw

2018-01-0517:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

CPENameOperatorVersion
avamar_servereq7.5.183
avamar_servereq7.4.242
avamar_servereq7.4-58 sp1
avamar_servereq7.3.211
avamar_servereq7.3.226
avamar_servereq7.3.233
avamar_servereq7.3-125 sp1
avamar_servereq7.2.309
avamar_servereq7.2.401
avamar_servereq7.2-32 sp1

Name	Operator	Version
avamar_server	eq	7.5.183
avamar_server	eq	7.4.242
avamar_server	eq	7.4-58 sp1
avamar_server	eq	7.3.211
avamar_server	eq	7.3.226
avamar_server	eq	7.3.233
avamar_server	eq	7.3-125 sp1
avamar_server	eq	7.2.309
avamar_server	eq	7.2.401
avamar_server	eq	7.2-32 sp1