PT-2016-4463 · Emc · Avamar Virtual Edition+1

Published 2016-11-15 · Updated 2017-07-29 · CVE-2016-0909

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions prior to 7.4

Description The issue may expose the Avamar servers to potentially be compromised by malicious users.

Recommendations For versions 7.3 and older, update to a version newer than 7.3 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-0909

Affected Products

Avamar Virtual Edition

Emc Avamar Data Store

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-0909 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0909 · Vendor Advisory
• http://securitytracker.com/id/1037066 · Note
• http://securityfocus.com/archive/1/539613 · Note
• http://securityfocus.com/bid/93788 · Note