CVE-2020-29494 — HIGH (8.7)

Vulnerability Description

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the arbitrary files stored on the server filesystem, causing deletion of arbitrary files.

CVSS Score

8.7

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Dell	Emc Avamar Server	19.1
Dell	Emc Integrated Data Protection Appliance	2.5

Related Weaknesses (CWE)

CWE-22

References

https://www.dell.com/support/kbdoc/en-us/000181806/dsa-2020-272-dell-emc-avamar-PatchVendor Advisory
https://www.dell.com/support/kbdoc/en-us/000181806/dsa-2020-272-dell-emc-avamar-PatchVendor Advisory

FAQ

What is CVE-2020-29494?

CVE-2020-29494 is a vulnerability with a CVSS score of 8.7 (HIGH). Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the a...

How severe is CVE-2020-29494?

CVE-2020-29494 has been rated HIGH with a CVSS base score of 8.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-29494?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Avamar Server, Dell Emc Integrated Data Protection Appliance.