High · 8.6 CVE-2019-3737 EUVD-2019-13372GHSA-p4r9-w473-78rf

Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

Published Jun 19, 2019 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.

Affected products

Vendor	Product	Affected	Fixed
Dell EMC	Avamar	ADMe Web UI 1.0.50, ADMe Web UI 1.0.51	—

References

https://seclists.org/fulldisclosure/2019/Jun/25