critical9.8
CVE-2017-15548
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Dat…
Impact
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized root access to the affected systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Avamar Server | Versions 7.1-21, 7.1-145, 7.1-302, 7.1-370, 7.2-32, 7.2-309 |
| Emc | Integrated Data Protection Appliance | Version 2.0 |
| Emc | Networker | Versions 9.0, 9.1, 9.2 |