Unscored CVE-2016-0906 EUVD-2016-0917GHSA-c992-c45f-f56p

The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 a…

Published Jul 6, 2016 · Updated Aug 5, 2024 · Assigned by dell

Description

The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.

References

1036235 vdb-entry
20160706 ESA-2016-054: EMC Avamar Data Store and Avamar Virtual Edition Unauthorized Data Access Vulnerability mailing-list