Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-21117

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.

Published

2025-02-05T14:15:27.417

Last Modified

2025-03-28T13:24:51.620

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.6 (MEDIUM)

Weaknesses

Type: Primary
CWE-672

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	dell	avamar_server	19.4	Yes
Application	dell	avamar_server	19.7	Yes
Application	dell	avamar_server	19.8	Yes
Application	dell	avamar_server	19.9	Yes
Application	dell	avamar_server	19.10	Yes
Application	dell	avamar_server	19.10	Yes

References

https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities Vendor Advisory ([email protected])