Description
Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Avamar Server | 19.8 through 19.12 – < Version 19.12 with CHF 338905 or later | Version 19.12 with CHF 338905 or later |
| Dell | Avamar Virtual Edition | 19.8 through 19.12 – < Version 19.12 with CHF 338905 or later | Version 19.12 with CHF 338905 or later |
| Dell | PowerProtect DP Series Appliance (IDPA) | N/A – < Version 2.7.9 with AV CHF 338905 | Version 2.7.9 with AV CHF 338905 |