CVE-2018-11067: vulnerability in Dell EMC Avamar
Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.8%
Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
Related CVEs — Dell EMC Avamar
In the same product, most dangerous first.
CVE-2018-11066—Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution VulnerabilityEPSS 9.9%CVE-2018-11048—CVE-2018-11048EPSS 2.1%CVE-2019-3737HIGHDell EMC Avamar Security Update for ADMe Web UI VulnerabilityEPSS 1.8%CVE-2018-11062—Dell EMC Integrated Data Protection Appliance Undocumented Accounts VulnerabilityEPSS 1.8%CVE-2018-11077—Dell EMC Avamar and Integrated Data Protection Appliance Command Injection VulnerabilityEPSS 1.0%CVE-2018-11076—Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure VulnerabilityEPSS 0.8%