6.6
CVE-2025-21117
- EPSS 0.07%
- Veröffentlicht 05.02.2025 14:15:27
- Zuletzt bearbeitet 28.03.2025 13:24:51
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginDell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Avamar Server Version19.4
Dell ≫ Avamar Server Version19.7
Dell ≫ Avamar Server Version19.8
Dell ≫ Avamar Server Version19.9
Dell ≫ Avamar Server Version19.10 Update-
Dell ≫ Avamar Server Version19.10 Updatesp1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.208 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
| security_alert@emc.com | 6.6 | 1.3 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
|
CWE-672 Operation on a Resource after Expiration or Release
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.