PT-2017-2438 · Emc · Emc Avamar Server

Publicado 2017-06-21 · Atualizado 2017-07-07 · CVE-2017-4989

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.2.0-401 through 7.3.1-125

Description The issue is related to weaknesses in the authentication procedure of the EMC Avamar backup system. It may allow a remote attacker to bypass authentication, gaining access to sensitive information, performing software updates, or executing other maintenance operations.

Recommendations For versions 7.2.0-401 through 7.3.1-125, consider restricting access to the system maintenance page as a temporary workaround until a patch is available. Additionally, review and strengthen the authentication process to prevent unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2017-01643

CVE-2017-4989

Produtos afetados

Emc Avamar Server

Referências · 6

• https://osv.dev/vulnerability/CVE-2017-4989 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01643 · Nota de Segurança
• http://securityfocus.com/archive/1/540754/30/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-4989 · Nota de Segurança
• http://securitytracker.com/id/1038718 · Nota
• http://securityfocus.com/bid/99243 · Nota