CVE-2019-3765: High severity emc avamar server virtual edition vulnerability
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-3765.
What is the severity of CVE-2019-3765?
The severity of CVE-2019-3765 is high (8.1).
What is the affected software?
The affected software includes Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 to 2.4.
What is the description of CVE-2019-3765?
CVE-2019-3765 is an Incorrect Permission Assignment for Critical Resource vulnerability found in Dell EMC Avamar Server and Dell EMC Integrated Data Protection Appliance (IDPA).
How can a malicious user exploit CVE-2019-3765?
A remote authenticated malicious user could potentially exploit the vulnerability.