CVE-2016-0903: Infoleak
Published Sep 21, 2016
·Updated
Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent.
Affected Software
1 affected component
EMC Avamar Server<=7.3.0
Event History
Sep 21, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0903?
CVE-2016-0903 has a high severity rating due to its potential for unauthorized data access.
2
How do I fix CVE-2016-0903?
To fix CVE-2016-0903, upgrade your EMC Avamar Server to version 7.3.0-233 or later.
3
What systems are affected by CVE-2016-0903?
CVE-2016-0903 affects EMC Avamar Server versions prior to 7.3.0-233.
4
What type of vulnerability is CVE-2016-0903?
CVE-2016-0903 is a client-side authentication vulnerability that can lead to remote code execution.
5
What are the potential impacts of CVE-2016-0903?
The potential impacts of CVE-2016-0903 include data loss and exposure of sensitive backup data to unauthorized users.