NetSight
high8.1

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI.

Impact

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data.

Affected products

VendorProductAffected versions
DellEmc Avamar Server
Versions 19.3, 19.4
DellEmc Integrated Data Protection Appliance
Version 2.6

Weakness classification

References