CVE-2018-11077

Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability

State: Published
Severity: Not scored
Published: Nov 26, 2018
Updated: Sep 17, 2024
Reserved: May 14, 2018

Description

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
AvamarDell EMC	7.2.0Affected 7.2.1Affected 7.3.0Affected 7.3.1Affected 7.4.0Affected 7.4.1Affected 7.5.0Affected 7.5.1Affected 18.1Affected
Integrated Data Protection ApplianceDell EMC	2.0Affected 2.1Affected 2.2Affected

References

https://www.vmware.com/security/advisories/VMSA-2018-0029.html
20181120 DSA-2018-155: Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerabilitymailing-list
105971vdb-entry
1042153vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.