CVE-2021-36316 Privilege escalation in Avamar
A malicious user with high privileges can exploit improper privilege management in Dell EMC Avamar Server to disclose information and perform unauthorized operations.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-36316?
CVE-2021-36316 is a medium-severity vulnerability in Dell Avamar, published on 21 Dec 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.
Weakness: CWE-269
Which versions are affected by CVE-2021-36316?
It affects 1 product.
Products include Dell Emc Avamar Server.
How do I fix CVE-2021-36316?
No fix has been published for CVE-2021-36316 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-36316 being exploited?
There is no known exploitation of CVE-2021-36316 in the wild and no public exploit code.
Other vulnerabilities in Dell Avamar
Sources
Also known as GHSA-wrmw-qgfp-5p47.