Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-11067

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.

Published

2018-11-26T20:29:00.297

Last Modified

2024-11-21T03:42:36.767

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell emc_avamar 7.2.0 Yes
Application dell emc_avamar 7.2.1 Yes
Application dell emc_avamar 7.3.0 Yes
Application dell emc_avamar 7.3.1 Yes
Application dell emc_avamar 7.4.0 Yes
Application dell emc_avamar 7.4.1 Yes
Application dell emc_avamar 7.5.0 Yes
Application dell emc_avamar 7.5.1 Yes
Application dell emc_avamar 18.1 Yes
Application dell emc_integrated_data_protection_appliance 2.0 Yes
Application dell emc_integrated_data_protection_appliance 2.1 Yes
Application dell emc_integrated_data_protection_appliance 2.2 Yes
Application vmware vsphere_data_protection 6.0.0 Yes
Application vmware vsphere_data_protection 6.0.1 Yes
Application vmware vsphere_data_protection 6.0.2 Yes
Application vmware vsphere_data_protection 6.0.3 Yes
Application vmware vsphere_data_protection 6.0.4 Yes
Application vmware vsphere_data_protection 6.0.5 Yes
Application vmware vsphere_data_protection 6.0.6 Yes
Application vmware vsphere_data_protection 6.0.7 Yes
Application vmware vsphere_data_protection 6.0.8 Yes
Application vmware vsphere_data_protection 6.1.0 Yes
Application vmware vsphere_data_protection 6.1.1 Yes
Application vmware vsphere_data_protection 6.1.2 Yes
Application vmware vsphere_data_protection 6.1.3 Yes
Application vmware vsphere_data_protection 6.1.4 Yes
Application vmware vsphere_data_protection 6.1.5 Yes
Application vmware vsphere_data_protection 6.1.6 Yes
Application vmware vsphere_data_protection 6.1.7 Yes
Application vmware vsphere_data_protection 6.1.8 Yes
Application vmware vsphere_data_protection 6.1.9 Yes
References