Description
Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to upload malicious files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Avamar Virtual Edition | 19.8 through 19.12 – < 9.12 with CHF 338905 or later | 9.12 with CHF 338905 or later |
| Dell | PowerProtect DP Series Appliance (IDPA) | N/A – < 2.7.9 with AV CHF 338905 | 2.7.9 with AV CHF 338905 |