Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2019-3737

Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

Description

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC Avamar

  • ADMe Web UI 1.0.50affected
  • ADMe Web UI 1.0.51affected

References