Lucene search
DellCVE-2013-0944HistoryMay 03, 2013 - 11:57 a.m.
CVE-2013-0944
2013-05-0311:57:44
CWE-200
dell
web.nvd.nist.gov
19
emc avamar
web-based
file-restore
remote authenticated users
arbitrary files
cve-2013-0944
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
51.0%
The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
Affected configurations
Node
emcavamarMatch5.0
ORemcavamarMatch5.0sp1
ORemcavamarMatch5.0sp2
ORemcavamarMatch5.0.0-407
ORemcavamarMatch5.0.4-26
ORemcavamarMatch6.0
ORemcavamarMatch6.0.1
ORemcavamarMatch6.0.2
ORemcavamarMatch6.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| emc | avamar | 5.0 | cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:* |
| emc | avamar | 5.0 | cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:* |
| emc | avamar | 5.0 | cpe:2.3:a:emc:avamar:5.0:sp2:*:*:*:*:*:* |
| emc | avamar | 5.0.0-407 | cpe:2.3:a:emc:avamar:5.0.0-407:*:*:*:*:*:*:* |
| emc | avamar | 5.0.4-26 | cpe:2.3:a:emc:avamar:5.0.4-26:*:*:*:*:*:*:* |
| emc | avamar | 6.0 | cpe:2.3:a:emc:avamar:6.0:*:*:*:*:*:*:* |
| emc | avamar | 6.0.1 | cpe:2.3:a:emc:avamar:6.0.1:*:*:*:*:*:*:* |
| emc | avamar | 6.0.2 | cpe:2.3:a:emc:avamar:6.0.2:*:*:*:*:*:*:* |
| emc | avamar | 6.0.3 | cpe:2.3:a:emc:avamar:6.0.3:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
ESA-2013-034: EMC Avamar Improper Authorization vulnerability
2013-05-04 00:00:00
EMC Avamar server / client security vulnerabilities
2013-05-04 00:00:00
cvelist
cvelist
CVE-2013-0944
2013-05-03 10:00:00
nvd
nvd
CVE-2013-0944
2013-05-03 11:57:44
prion
prion
Code injection
2013-05-03 11:57:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
51.0%
Related for CVE-2013-0944