CVE-2013-3275: Input Validation
EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3275?
CVE-2013-3275 has been classified as a medium-severity vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2013-3275?
To mitigate CVE-2013-3275, users should upgrade to EMC Avamar Server and Avamar Virtual Edition versions 7.0 or higher.
Which versions of EMC Avamar are affected by CVE-2013-3275?
CVE-2013-3275 affects EMC Avamar Server and Avamar Virtual Edition versions prior to 7.0, including 4.0, 4.1, 5.0, and 6.0.
What type of attack does CVE-2013-3275 enable?
CVE-2013-3275 enables attackers to conduct cross-frame scripting attacks to obtain sensitive information from users.
Is there a workaround for CVE-2013-3275 before upgrading?
There are no specific workarounds available for CVE-2013-3275, so upgrading is the recommended action.