CVE-2018-11077
'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability.
Does this matter?
Lower severity and a low EPSS score (1.00%). Track it; it rarely justifies an emergency change on its own.
Description
'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.
- CVSS 3.0
- 6.7 MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.00% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- dell/emc avamar · dell/emc integrated data protection appliance · vmware/vsphere data protection
- Source
- security_alert@emc.com
References
- http://www.securityfocus.com/bid/105971Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042153Third Party Advisory, VDB Entry
- https://seclists.org/fulldisclosure/2018/Nov/51Mailing List, Third Party Advisory
- https://www.vmware.com/security/advisories/VMSA-2018-0029.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/105971Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042153Third Party Advisory, VDB Entry
- https://seclists.org/fulldisclosure/2018/Nov/51Mailing List, Third Party Advisory
- https://www.vmware.com/security/advisories/VMSA-2018-0029.htmlPatch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.