Product:
Avamar
Summary
Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.3 | CVE-2025-21120 |
Exploitation
An attacker with low privileges and remote access can exploit this vulnerability by sending specially crafted HTTP requests to the affected server. This could allow the attacker to gain unauthorized access to sensitive information, as the server does not properly validate the permissions associated with the HTTP methods.
Affected Products
- Dell Avamar versions prior to 19.10 SP1 with patch 338904
- Dell Avamar versions prior to 19.12 with patch 338905
Mitigation
To mitigate this vulnerability, users should update their Dell Avamar installations to the latest version with the appropriate patches applied. Regularly applying security updates and monitoring for unusual activity can also help protect against potential exploitation.