CVE-2019-3765
First published: Wed Oct 09 2019(Updated: )
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Avamar Server | =7.4.1 | |
| Dell EMC Avamar Server | =7.5.0 | |
| Dell EMC Avamar Server | =7.5.1 | |
| Dell EMC Avamar Server | =18.2 | |
| Dell EMC Avamar Server | =19.1 | |
| Dell EMC Integrated Data Protection Appliance | >=2.0<=2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-3765.
What is the severity of CVE-2019-3765?
The severity of CVE-2019-3765 is high (8.1).
What is the affected software?
The affected software includes Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 to 2.4.
What is the description of CVE-2019-3765?
CVE-2019-3765 is an Incorrect Permission Assignment for Critical Resource vulnerability found in Dell EMC Avamar Server and Dell EMC Integrated Data Protection Appliance (IDPA).
How can a malicious user exploit CVE-2019-3765?
A remote authenticated malicious user could potentially exploit the vulnerability.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/dell
- canonical/dell emc avamar server
- version/dell emc avamar server/7.4.1
- version/dell emc avamar server/7.5.0
- version/dell emc avamar server/7.5.1
- version/dell emc avamar server/18.2
- version/dell emc avamar server/19.1
- canonical/dell emc integrated data protection appliance
- version/dell emc integrated data protection appliance/2.0
- version/dell emc integrated data protection appliance/2.4