Password Storage Weakness in Dell EMC Avamar Server

CVE-2021-36317

Summary

Dell EMC Avamar Server version 19.4 has a weakness in how it handles password storage within AvInstaller, allowing local attackers to exploit this flaw. By leveraging this vulnerability, attackers may gain access to sensitive user credentials stored in plain text. This exposure can lead to the unauthorized use of those credentials, enabling the attacker to operate with the same privileges as the compromised accounts.

References