CVE-2016-8214

MEDIUM

EMC Avamar <7.3.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry x_refsource_confirm
http://www.securityfocus.com/archive/1/540031/30/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/95719
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037667

Scores

CVSS v3 6.7
EPSS 0.0008
EPSS Percentile 23.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-275
Status published
Products (5)
emc/avamar_data_store 7.3.0
emc/avamar_data_store 7.3.1
emc/avamar_virtual_edition 7.3.0
emc/avamar_virtual_edition 7.3.1
n/a/EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1
Published Jan 25, 2017
Tracked Since Feb 18, 2026