Dell Avamar Trusting HTTP Permission Methods Vulnerability Leading to Information Exposure

A vulnerability exists in Dell Avamar and Dell Avamar Virtual Edition, specifically in versions prior to 19.12 with patch 338905, and versions 19.10SP1 with patch 338904. This vulnerability involves trusting HTTP permission methods on the server side, which could be exploited by a low-privileged attacker with remote access, potentially leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized information exposure.

Remediation

Users can upgrade to Dell Avamar version 19.12 with patch 338905 or later. For versions 19.10, 19.10-SP1, 19.7, 19.8, 19.9, and 19.4, users should upgrade to version 19.10SP1 with patch 338904 or later. Instructions for downloading the updated versions are available in the Avamar Downloads Area.