CVE-2025-21117

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.

Score

CVSS 3.1 6.6 Medium

Status

Analyzed - security_alert@emc.com

Published

2025-02-05

Last modified

2025-02-12

Weaknesses

CWE-672

Affected products

• Avamar (Dell)
• Avamar Server (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-…