CVE-2021-36316
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
35.3%
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | emc_avamar_server | 18.2 | cpe:2.3:a:dell:emc_avamar_server:18.2:*:*:*:*:*:*:* |
| dell | emc_avamar_server | 19.1 | cpe:2.3:a:dell:emc_avamar_server:19.1:*:*:*:*:*:*:* |
| dell | emc_avamar_server | 19.2 | cpe:2.3:a:dell:emc_avamar_server:19.2:*:*:*:*:*:*:* |
| dell | emc_avamar_server | 19.3 | cpe:2.3:a:dell:emc_avamar_server:19.3:*:*:*:*:*:*:* |
| dell | emc_avamar_server | 19.4 | cpe:2.3:a:dell:emc_avamar_server:19.4:*:*:*:*:*:*:* |
References
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
35.3%