EMC Avamar Server Software Arbitrary File Upload Vulnerability

EMC Avamar Server Software is a suite of fully virtualized backup and recovery software for servers from EMC. The software provides data backup, disaster recovery, and deduplication elimination. An arbitrary file upload vulnerability exists in EMC Avamar Server Software. An attacker can exploit...

PT-2017-2438

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.2.0-401 through 7.3.1-125 Description The issue is related to weaknesses in the authentication procedure of the EMC Avamar backup system. It may allow a remote attacker to bypass authentication, gaining...

CVE-2017-4990: Unrestricted Upload of File with Dangerous Type

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

PT-2017-2437

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.3.0-226 through 7.4.1-58 Description The issue is related to the lack of restrictions on uploading dangerous file types in the system maintenance page of the EMC Avamar Server Software. This could allow an...

CVE-2017-4989: Improper Authentication

In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...