Back to feed
EUVD-2016-0914 · Published Sep 21, 2016
Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent.
Technologies
Emc Avamar Server
Weaknesses
CWE-200
CVSS scores
- v3.09.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - v2.06.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
