VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Nov 26, 2018· Updated Jun 17, 2026

CVE-2018-11076

CVE-2018-11076

Description

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

30
  • Dell/Emc Avamar6 versions
    cpe:2.3:a:dell:emc_avamar:7.2.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:dell:emc_avamar:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_avamar:7.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_avamar:7.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_avamar:7.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_avamar:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_avamar:7.4.1:*:*:*:*:*:*:*
  • Dell/Emc Integrated Data Protection Appliance
    cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*
  • VMware/Vsphere Data Protection19 versions
    cpe:2.3:a:vmware:vsphere_data_protection:6.0.0:*:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vsphere_data_protection:6.1.9:*:*:*:*:*:*:*
  • EMC Corporation/Integrated Data Protection Appliancellm-create
    Range: 2.0
  • Dell/Avamar Serverllm-fuzzy
    Range: 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1
  • EMC Corporation/Avamarcpe-rescue
    Range: 7.2.0
  • EMC Corporation/Avamar, Integrated Data Protection Appliancecpe-rescue
    Range: 2.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.