Path Traversal Vulnerability in Dell EMC Avamar Server
CVE-2020-29494

8.7HIGH

Key Information:

Vendor

Dell
Status
Avamar
Vendor
CVE Published:
14 January 2021

What is CVE-2020-29494?

The Dell EMC Avamar Server has a critical path traversal vulnerability within its PDM that enables an attacker to gain unauthorized write access to files on the server's filesystem. This may lead to the deletion or manipulation of arbitrary files, compromising the integrity of the system. Remote exploitation poses a significant risk, making it imperative for affected users to apply the necessary security updates to mitigate this threat.

Affected Version(s)

Avamar < unspecified

References

https://www.dell.com/support/kbdoc/en-us/000181806/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.