8.3
High
CVE-2025-21120 Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the…
Description
Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avamar Data Store Gen4T | Versions not published | |
| Avamar Data Store Gen5A | Versions not published | |
| Avamar Virtual Edition for VMware ESXi and vSphere | Versions not published | |
| Avamar Virtual Edition for VMware vSphere only | Versions not published | |
| Avamar Server | Versions not published | |
| Avamar Virtual Edition | Versions not published |