PT-2017-2438 · Emc · Emc Avamar Server

Published 2017-06-21 · Updated 2017-07-07 · CVE-2017-4989

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Avamar Server Software versions 7.2.0-401 through 7.3.1-125

Description The issue is related to weaknesses in the authentication procedure of the EMC Avamar backup system. It may allow a remote attacker to bypass authentication, gaining access to sensitive information, performing software updates, or executing other maintenance operations.

Recommendations For versions 7.2.0-401 through 7.3.1-125, consider restricting access to the system maintenance page as a temporary workaround until a patch is available. Additionally, review and strengthen the authentication process to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2017-01643

CVE-2017-4989

Affected Products

Emc Avamar Server

References · 6

• https://osv.dev/vulnerability/CVE-2017-4989 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01643 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-4989 · Security Note
• http://securityfocus.com/archive/1/540754/30/0/threaded · Note
• http://securitytracker.com/id/1038718 · Note
• http://securityfocus.com/bid/99243 · Note