{"id":"CVE-2018-11076","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-11076","generatedAt":"2026-10-29T01:48:55.247Z","title":"Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability.","description":"Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.","published":"2018-11-26T20:29:00.000Z","lastModified":"2026-06-17T01:35:13.000Z","status":"Modified","sourceIdentifier":"security_alert@emc.com","cvss":{"version":"3.0","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":[],"affected":["dell/emc avamar","dell/emc integrated data protection appliance","vmware/vsphere data protection"],"epss":{"score":0.00834,"percentile":0.57465,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.83%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/105972","tags":["Third Party Advisory","VDB Entry"],"source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1042153","tags":["Third Party Advisory","VDB Entry"],"source":"security_alert@emc.com"},{"url":"https://seclists.org/fulldisclosure/2018/Nov/50","tags":["Mailing List","Third Party Advisory"],"source":"security_alert@emc.com"},{"url":"https://www.vmware.com/security/advisories/VMSA-2018-0029.html","tags":["Patch","Third Party Advisory"],"source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/105972","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1042153","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/fulldisclosure/2018/Nov/50","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.vmware.com/security/advisories/VMSA-2018-0029.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-11076","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}