PT-2013-4271 · Emc · Avamar Virtual Edition+1

Publicado 2013-07-18 · Atualizado 2013-07-29 · CVE-2013-3275

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC Avamar Server and Avamar Virtual Edition versions prior to 7.0

Description The issue makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to cross frame scripting vulnerabilities, due to the improper restriction of use of FRAME elements.

Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-3275

Produtos afetados

Avamar Virtual Edition

Emc Avamar Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3275 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html · Nota