Описание
The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.
Уязвимые конфигурации
Конфигурация 1Версия до 7.2.1 (включая)
cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00406
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.
EPSS
Процентиль: 60%
0.00406
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-284