Skip to content
OpenAdvisories
Unscored CVE-2018-11077 EUVD-2018-3121GHSA-53fw-rm7m-jqgv

Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability

Published Nov 26, 2018 · Updated Sep 17, 2024 · Assigned by dell

Description

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.

Affected products

VendorProductAffectedFixed
Dell EMC Avamar 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 —
Dell EMC Integrated Data Protection Appliance 2.0, 2.1, 2.2 —

References