The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
2013-05-03T11:57:44.767
2025-04-11T00:51:21.963
Deferred
CVSSv2: 3.5 (LOW)
AV:N/AC:M/Au:S/C:P/I:N/A:N
6.8
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | emc | avamar | 5.0 | Yes |
| Application | emc | avamar | 5.0 | Yes |
| Application | emc | avamar | 5.0 | Yes |
| Application | emc | avamar | 5.0.0-407 | Yes |
| Application | emc | avamar | 5.0.4-26 | Yes |
| Application | emc | avamar | 6.0 | Yes |
| Application | emc | avamar | 6.0.1 | Yes |
| Application | emc | avamar | 6.0.2 | Yes |
| Application | emc | avamar | 6.0.3 | Yes |