PT-2017-2437

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.3.0-226 through 7.4.1-58 Description The issue is related to the lack of restrictions on uploading dangerous file types in the system maintenance page of the EMC Avamar Server Software. This could allow an...

CVE-2017-4990: Unrestricted Upload of File with Dangerous Type

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

PT-2017-2438

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.2.0-401 through 7.3.1-125 Description The issue is related to weaknesses in the authentication procedure of the EMC Avamar backup system. It may allow a remote attacker to bypass authentication, gaining...

CVE-2017-4989: Improper Authentication

In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...