CVE-2021-36316

Vulnerability

The vulnerability exists in the Avamar User Interface (AUI) of Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4. It is an improper privilege management flaw that may be exploited by a malicious user who already possesses high privileges on the system [1].

Exploitation

An attacker must first obtain high-privileged access (e.g., an administrator account) to the Avamar Server. With network access to the AUI, the attacker can then exploit the improper privilege management to perform actions that should be restricted, including disclosing AUI-specific information [1]. The CVSS vector indicates the attack is over the network (AV:N), requires low complexity (AC:L), and does not require user interaction (UI:N) [1].

Impact

A successful exploit leads to disclosure of sensitive AUI information and allows the attacker to carry out unauthorized operations within the AUI. The CVSS scope is unchanged (S:U), with low impact on confidentiality (C:L) and high impact on integrity (I:H) and availability (A:H) [1]. This means an attacker could modify or disrupt AUI functions while gaining limited read access to information.

Mitigation

Dell has released a security update to address this vulnerability. Customers should apply the relevant patch for their Avamar Server version as detailed in Dell Security Advisory DSA-2021-204 [1]. No workarounds are provided; upgrading to the fixed version is the recommended mitigation.