6.6
CVE-2025-21117
- EPSS 0.07%
- Published 05.02.2025 14:15:27
- Last modified 28.03.2025 13:24:51
- Source security_alert@emc.com
- Teams watchlist Login
- Open Login
Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.
Data is provided by the National Vulnerability Database (NVD)
Dell ≫ Avamar Server Version19.4
Dell ≫ Avamar Server Version19.7
Dell ≫ Avamar Server Version19.8
Dell ≫ Avamar Server Version19.9
Dell ≫ Avamar Server Version19.10 Update-
Dell ≫ Avamar Server Version19.10 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.223 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
| security_alert@emc.com | 6.6 | 1.3 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
|
CWE-672 Operation on a Resource after Expiration or Release
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.