Description
Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Avamar Server | 19.8 through 19.10 – < 19.10 SP1 with CHF 338904 or later | 19.10 SP1 with CHF 338904 or later |
| Dell | Avamar Virtual Edition | 19.8 through 19.10 – < 19.10 SP1 with CHF 338904 or later | 19.10 SP1 with CHF 338904 or later |
Advisories 1
- WID-SEC-2025-1611 Dell Avamar: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 4, 2025