The vulnerability of the EMC Avamar backup system allows a perpetrator to access confidential information, update software, or otherwise affect the application.

The vulnerability of the EMC Avamar backup system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to access confidential information, update software, or perform any other service-related operations...

EMC Avamar ADS / AVE 7.2.x < 7.2.1 Hotfix 277897 / 7.3.x < 7.3.1 Hotfix 276676 / 7.4.x < 7.4.1 Hotfix 279294 Multiple Vulnerabilities (ESA-2017-054)

According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is 7.2.x prior to 7.2.1 Hotfix 277897 7.2.1.32, 7.3.x prior to 7.3.1 Hotfix 276676 7.3.1.125, or 7.4.x prior to 7.4.1 Hotfix 279294 7.4.1.58. It is,...

EMC Avamar Server Software Arbitrary File Upload Vulnerability

EMC Avamar Server Software is a suite of fully virtualized backup and recovery software for servers from EMC. The software provides data backup, disaster recovery, and deduplication elimination. An arbitrary file upload vulnerability exists in EMC Avamar Server Software. An attacker can exploit...

CVE-2017-4990

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

Design/Logic Flaw

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

CVE-2017-4989

In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...

Authentication flaw

In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...

CVE-2017-4990

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

CVE-2017-4990

CVE-2017-4990 concerns EMC Avamar Server Software where an unauthenticated attacker can abuse the file upload feature on the system maintenance page to place a crafted file in a user-accessible path, enabling execution of arbitrary code on the Avamar Server. The vulnerability affects multiple tra...

CVE-2017-4989

In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...

CVE-2017-4989

CVE-2017-4989 affects EMC Avamar Server Software releases listed (7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401). Root cause: unauthenticated remote bypass of authentication to access the system maintenance page, enabling viewing of sensitive info and execution of maintenance tas...

CVE-2017-4990

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avam...

EMC Avamar Data Store and EMC Avamar Virtual Edition Local Elevation of Privilege Vulnerability

EMC Avamar Data Store ADS and EMC Avamar Virtual Edition AVE are both backup and recovery solutions from EMC Corporation. The solutions provide data backup, disaster recovery, and deduplication elimination. A security vulnerability exists in EMC ADS and AVE versions 7.3.0 and 7.3.1. An attacker...

EMC Avamar ADS / AVE 7.3.0.x < 7.3.0 Hotfix 268253 / 7.3.1.x < 7.3.1 Hotfix 272363 Incorrect File Ownership Local Privilege Escalation (ESA-2016-146)

According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is a version prior to 7.3.0 Hotfix 268253 7.3.0.233 or prior to 7.3.1 Hotfix 272363 7.3.1.125. It is, therefore, affected by a local privilege escalation...

Code injection

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers...

CVE-2016-8214

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers...

CVE-2016-8214

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers...

CVE-2016-8214

CVE-2016-8214 affects EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1. The root cause is incorrect file ownership that enables a local attacker with administrative access to bypass certain sudo restrictions and achieve root-level privilege escalation, potenti...

CVE-2016-8214

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers...

EMC Avamar Data Store / Virtual Edition 7.3.1 / 7.3.0 Privilege Escalation Vulnerability

Exploit for windows platform in category web applications ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability EMC Identifier: ESA-2016-146 CVE Identifier: CVE-2016-8214 Severity Rating: CVSSv3 Base Score: 6.7 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affect...