PT-2021-12394 · Dell Emc · Dell Emc Avamar Server

Published 2021-07-29 · Updated 2021-08-06 · CVE-2020-5329

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server (affected versions not specified)

Description The issue allows a remote unauthenticated attacker to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. This is achieved through an open redirect vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-5329

Affected Products

Dell Emc Avamar Server

References · 5

• https://dell.com/support/security/en-us/details/541529/DSA-2020-046-Dell-EMC-Avamar-Server-Open-Redirect-Vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5329 · Security Note
• https://t.me/cvenotify/18330 · Telegram Post
• https://t.me/cibsecurity/26573 · Telegram Post