CVE-2019-3737CWE-22

Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

High · published June 19, 2019

CVSS v3.0
8.6
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01783 · 78.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-06-19T22:28Z
EPSS history
Timeline
  • 19 JUN 22:28Z
    Dell EMC Avamar Security Update for ADMe Web UI Vulnerability
    cvelistv5