CVE-2016-0906

The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://seclists.org/bugtraq/2016/Jul/33
http://www.securitytracker.com/id/1036235
http://seclists.org/bugtraq/2016/Jul/33
http://www.securitytracker.com/id/1036235

Configurations

Configuration 1 (hide)

cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:42

Type	Values Removed	Values Added
References	~~() http://seclists.org/bugtraq/2016/Jul/33 -~~	() http://seclists.org/bugtraq/2016/Jul/33 -
References	~~() http://www.securitytracker.com/id/1036235 -~~	() http://www.securitytracker.com/id/1036235 -

Information

Published : 2016-07-06 14:59

Updated : 2024-11-21 02:42

NVD link : CVE-2016-0906

Mitre link : CVE-2016-0906

CVE.ORG link : CVE-2016-0906

JSON object : View

Products Affected

emc

avamar

CWE

CWE-284

Improper Access Control

{"id": "CVE-2016-0906", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2016-07-06T14:59:00.130", "references": [{"url": "http://seclists.org/bugtraq/2016/Jul/33", "source": "security_alert@emc.com"}, {"url": "http://www.securitytracker.com/id/1036235", "source": "security_alert@emc.com"}, {"url": "http://seclists.org/bugtraq/2016/Jul/33", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1036235", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation."}, {"lang": "es", "value": "La interfaz web de restauraci\u00f3n en Avamar Data Store (ADS) y Avamar Virtual Edition (AVE) en EMC Avamar hasta la versi\u00f3n 7.1.2 y 7.2.x hasta la versi\u00f3n 7.2.1 permite a usuarios remotos autenticados leer o borrar directorios a trav\u00e9s de una operaci\u00f3n de restauraci\u00f3n de copia de seguridad en Linux."}], "lastModified": "2024-11-21T02:42:36.713", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AA9A66C-32BE-4F60-BB41-C014E5B22148", "versionEndIncluding": "7.2.1"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}