6.5

CVE-2018-11076

Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Emc Avamar Version 7.2.0
Dell ≫ Emc Avamar Version 7.2.1
Dell ≫ Emc Avamar Version 7.3.0
Dell ≫ Emc Avamar Version 7.3.1
Dell ≫ Emc Avamar Version 7.4.0
Dell ≫ Emc Avamar Version 7.4.1
VMware ≫ Vsphere Data Protection Version 6.0.0
VMware ≫ Vsphere Data Protection Version 6.0.1
VMware ≫ Vsphere Data Protection Version 6.0.2
VMware ≫ Vsphere Data Protection Version 6.0.3
VMware ≫ Vsphere Data Protection Version 6.0.4
VMware ≫ Vsphere Data Protection Version 6.0.5
VMware ≫ Vsphere Data Protection Version 6.0.6
VMware ≫ Vsphere Data Protection Version 6.0.7
VMware ≫ Vsphere Data Protection Version 6.0.8
VMware ≫ Vsphere Data Protection Version 6.1.0
VMware ≫ Vsphere Data Protection Version 6.1.1
VMware ≫ Vsphere Data Protection Version 6.1.2
VMware ≫ Vsphere Data Protection Version 6.1.3
VMware ≫ Vsphere Data Protection Version 6.1.4
VMware ≫ Vsphere Data Protection Version 6.1.5
VMware ≫ Vsphere Data Protection Version 6.1.6
VMware ≫ Vsphere Data Protection Version 6.1.7
VMware ≫ Vsphere Data Protection Version 6.1.8
VMware ≫ Vsphere Data Protection Version 6.1.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.83% 0.528
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1042153
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0029.html
Patch
Third Party Advisory
http://www.securityfocus.com/bid/105972
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2018/Nov/50
Third Party Advisory
Mailing List