Dell Avamar Access Token Reuse Vulnerability Allowing User Impersonation

Vulnerability

An access token reuse vulnerability has been identified in the Dell Avamar AUI, affecting versions 19.4 and later. This vulnerability allows a low-privileged local attacker to impersonate a user by reusing access tokens.

Impact

Exploitation of this vulnerability could lead to unauthorized user impersonation.

Remediation

Users can upgrade to Dell Avamar version 19.12 or later. Instructions for downloading this version are available on the Dell Support website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
5.0
exploitability
3.5
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.