CVE-2016-0906
The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - security_alert@emc.com
- Published
- 2016-07-06
- Last modified
- 2024-08-05
- Weaknesses
- CWE-284
Affected products
References
- http://seclists.org/bugtraq/2016/Jul/33
- http://www.securitytracker.com/id/1036235
