Description
Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Avamar | 19.4, 19.7, 19.8, 19.9, 19.10, 19.10 SP1 | — |
Advisories 1
- WID-SEC-2025-0272 Dell Avamar: Schwachstelle ermöglicht Erlangen von Benutzerrechten BSI CERT-Bund (WID) · Feb 5, 2025