Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveDellCVE-2013-3274
HistoryJul 19, 2013 - 2:36 p.m.

CVE-2013-3274

2013-07-1914:36:13
CWE-264
dell
web.nvd.nist.gov
25
emc
avamar
server
virtual edition
data store
gen3
gen4
gen4s
java rmi
remote code execution
vulnerability
cve-2013-3274
nvd

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.003

Percentile

68.2%

JSON

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
emcavamar_serverRange≤6.1
OR
emcavamar_serverMatch4.0
OR
emcavamar_serverMatch4.1
OR
emcavamar_serverMatch5.0
OR
emcavamar_serverMatch6.0
OR
emcavamar_server_virtual_editionRange≤6.1
OR
emcavamar_server_virtual_editionMatch4.0
OR
emcavamar_server_virtual_editionMatch4.1
OR
emcavamar_server_virtual_editionMatch5.0
OR
emcavamar_server_virtual_editionMatch6.0
VendorProductVersionCPE
emcavamar_server*cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*
emcavamar_server4.0cpe:2.3:a:emc:avamar_server:4.0:*:*:*:*:*:*:*
emcavamar_server4.1cpe:2.3:a:emc:avamar_server:4.1:*:*:*:*:*:*:*
emcavamar_server5.0cpe:2.3:a:emc:avamar_server:5.0:*:*:*:*:*:*:*
emcavamar_server6.0cpe:2.3:a:emc:avamar_server:6.0:*:*:*:*:*:*:*
emcavamar_server_virtual_edition*cpe:2.3:a:emc:avamar_server_virtual_edition:*:*:*:*:*:*:*:*
emcavamar_server_virtual_edition4.0cpe:2.3:a:emc:avamar_server_virtual_edition:4.0:*:*:*:*:*:*:*
emcavamar_server_virtual_edition4.1cpe:2.3:a:emc:avamar_server_virtual_edition:4.1:*:*:*:*:*:*:*
emcavamar_server_virtual_edition5.0cpe:2.3:a:emc:avamar_server_virtual_edition:5.0:*:*:*:*:*:*:*
emcavamar_server_virtual_edition6.0cpe:2.3:a:emc:avamar_server_virtual_edition:6.0:*:*:*:*:*:*:*

Related

cvelist 1
nvd 1
prion 1
securityvulns 2
cvelist
cvelist
CVE-2013-3274
2013-07-18 22:00:00
nvd
nvd
CVE-2013-3274
2013-07-19 14:36:13
prion
prion
Authorization
2013-07-19 14:36:00
securityvulns
securityvulns
ESA-2013-055: EMC Avamar Multiple Vulnerabilities
2013-07-19 00:00:00
EMC Avamar security vulnerabilities
2013-07-19 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.003

Percentile

68.2%

JSON
Related for CVE-2013-3274
cvelist1nvd1prion1securityvulns2