Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability

Description

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.

Scores

EPSS (exploitation in 30 days)

0.83% · top 42% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

• Remote Code Execution Vulnerability

Affected products

• Dell EMC · Avamar

  • affected 7.2.0
  • affected 7.2.1
  • affected 7.3.0
  • affected 7.3.1
  • affected 7.4.0
  • affected 7.4.1

• Dell EMC · Integrated Data Protection Appliance

  • affected 2.0

References (4)

• 20181120 DSA-2018-154: Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• https://www.vmware.com/security/advisories/VMSA-2018-0029.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 105972 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 1042153 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-11076](https://trackcve.app/badge/CVE-2018-11076.svg)](https://trackcve.app/cve/CVE-2018-11076)

Record last updated 16 Sept 2024, 20:32 UTC.