Apache Solr Code Execution

The vulnerability of the application programming interface for backup/restore services provided by the Apache Solr search server lies in the lack of restrictions on the loading of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the system remotely...

Design/Logic Flaw

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906: Improper Access Control

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

PT-2016-4460

Name of the Vulnerable Software and Affected Versions EMC Avamar versions 7.1.2 and earlier EMC Avamar versions 7.2.x through 7.2.1 Description The issue affects the web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE, allowing remote authenticated users to read or delet...

CVE-2013-0944

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2013-0944: Exposure of Sensitive Information to an Unauthorized Actor

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...

PT-2013-2738

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions prior to 6.1.0 Description The issue affects the web-based file-restore interface, allowing remote authenticated users to read arbitrary files by crafting a specific URL. Recommendations For versions prior to 6.1.0,...