PT-2025-31850 · Dell · Dell Avamar

Published 2025-08-04 · Updated 2026-02-17 · CVE-2025-21120

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Dell Avamar versions prior to 19.12 with patch 338905 Dell Avamar version 19.10SP1 with patch 338904 is excluded.

Description Dell Avamar contains a Trusting HTTP Permission Methods on the Server-Side issue in Security. A low privileged attacker with remote access could potentially exploit this issue, leading to Information exposure.

Recommendations Update Dell Avamar to version 19.12 with patch 338905 or later. Apply patch 338905 to versions prior to 19.12. Do not use Dell Avamar version 19.10SP1 with patch 338904.

Fix

Weakness Enumeration

CWE-650

Related Identifiers

CVE-2025-21120

Affected Products

Dell Avamar

References · 7

• https://osv.dev/vulnerability/CVE-2025-21120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21120 · Security Note
• https://dell.com/support/kbdoc/en-us/000347698/dsa-2025-271-security-update-for-dell-avamar-and-dell-avamar-virtual-edition-multiple-vulnerabilities · Vendor Advisory
• https://t.me/CVEtracker/29115 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1952482060829888785 · Twitter Post
• https://t.me/cveNotify/152225 · Telegram Post
• https://twitter.com/CVEnew/status/1952443672114385016 · Twitter Post