What is CVE-2018-1217?

CVE-2018-1217 is a critical-severity vulnerability in Dell EMC Avamar, classified under Missing Authorization. CVSS score: 9.8/10. Published 2018-04-09.

How severe is CVE-2018-1217?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2018-1217 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Dell EMC Avamar

CVE-2018-1217

Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or change the Local Download Service (LDLS) credentials. The LDLS credentials are used to connect to Dell EMC Online Support. If the LDLS configuration was changed to an invalid configuration, then Avamar Installation Manager may not be able to connect to Dell EMC Online Support web site successfully. The remote unauthenticated attacker can also read and use the credentials to login to Dell EMC Online Support, impersonating the AVI service actions using those credentials.

Vulnerability class: Broken Access Control

EPSS: 0.466 (98.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Emc_avamar — versions 7.3.1, 7.4.1, 7.5.0
Dell Emc_integrated_data_protection_appliance — versions 2.0, 2.1
Dell Emc Avamar, Integrated Data Protection Appliance — versions Integrated Data Protection Appliance Versions 2.0, 2.1, Avamar Server versions 7.3.1, 7.4.1, 7.5.0

Weakness classification (CWE)

CWE-862 — Missing Authorization

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

security_alert@emc.com (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
security_alert@emc.com (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2018-1217?: CVE-2018-1217 is a critical-severity vulnerability in Dell EMC Avamar, classified under Missing Authorization. CVSS score: 9.8/10. Published 2018-04-09.
How severe is CVE-2018-1217?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2018-1217 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.