Information disclosure in Emc Avamar

CVE-2013-0944

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.

Vulnerability class: Information Disclosure

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

Affected products

  • Emc Avamar — versions 5.0, 5.0.0-407, 5.0.4-26
  • N/a — versions n/a

Weakness classification (CWE)

References