CVE-2018-11076: Undefined Security Weakness

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance IDPA 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client...

CVE-2018-11067: URL Redirection to Untrusted Site

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could...

CVE-2018-11077: Improper Neutralization of Special Elements used in an OS Command

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially...

CVE-2018-11066: Undefined Security Weakness

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could...

PT-2018-10280

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.2 Description The issue allows a remote unauthenticated attacker to potentially execute arbitrary commands on t...

Dell EMC Avamar Remote Code Execution Vulnerability

Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. A remote code execution vulnerability exists in Dell EMC Avamar. A remote, unauthenticated attacker could exploit this vulnerability to execute arbitrary commands on the server...

Dell EMC Avamar Open Redirect Vulnerability

Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. An open redirection vulnerability exists in Dell EMC Avamar. A remote, unauthenticated attacker could exploit this vulnerability to redirect an application user to an arbitrary Web URL by tricking the victim...

Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability

Dell EMC Avamar Server and EMC Integrated Data Protection Appliance are both products of Dell Inc. Dell EMC Avamar Server is a fully virtualized backup and recovery software for servers.EMC Integrated Data Protection Appliance is a disk-based backup and recovery solution. EMC Integrated Data...

PT-2018-2864

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1 and version 18.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.2 Description The issue is related to an OS command injection vulnerability in the 'getlogs' utility...

PT-2018-2556

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.2 Description The issue is related to an open redirection vulnerability in the Dell EMC Avamar Client Manager...

PT-2018-2865

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.4.1 Dell EMC Integrated Data Protection Appliance IDPA version 2.0 Description The issue is related to an information exposure vulnerability. The Avamar Java management console's SSL/TLS private...

Information disclosure

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...

Denial of service

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...

CVE-2018-15771

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...

CVE-2018-15772

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...

CVE-2018-15771 Dell EMC RecoverPoint Information Disclosure Vulnerability

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...

CVE-2018-15772 Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...

CVE-2018-15772

Dell EMC RecoverPoint and RecoverPoint for VMs are affected by CVE-2018-15772: versions prior to 5.1.2.1 (RecoverPoint) and prior to 5.2.0.2 (RecoverPoint for VMs) contain an uncontrolled resource consumption vulnerability. A local boxmgmt user can potentially cause high CPU usage via the Boxmgmt...

CVE-2018-15771

Dell EMC RecoverPoint and RecoverPoint for VMs are affected by an information-disclosure vulnerability in versions before 5.1.2.1 and 5.2.0.2 respectively. The issue arises when a boxmgmt user can use the Boxmgmt CLI to determine the existence of system files, enabling local information disclosur...

CVE-2018-15772: Uncontrolled Resource Consumption

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...