Name of the Vulnerable Software and Affected Versions:

Dell Avamar versions prior to 19.12 with patch 338905

Dell Avamar version 19.10SP1 with patch 338904 is excluded.

Description:

Dell Avamar contains a Trusting HTTP Permission Methods on the Server-Side issue in Security. A low privileged attacker with remote access could potentially exploit this issue, leading to Information exposure.

Recommendations:

Update Dell Avamar to version 19.12 with patch 338905 or later.

Apply patch 338905 to versions prior to 19.12.

Do not use Dell Avamar version 19.10SP1 with patch 338904.