CVE-2016-0921

Loading...

General

Score:6.9/10.0
Severity:Medium
Category:Access Control Error

Impact Metrics

Confidentiality:Complete
Integrity:Complete
Availability:Complete

Exploitability Metrics

Access Vector:Local
Access Complexity:Medium
Authentication:None

Published on 21/09/16 - Updated on 30/07/17

Description

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users to obtain root access by replacing a script with a Trojan horse program.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2016-0921

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
emcavamar_server

Share this vulnerability with:

Twitter Facebook LinkedIn Mail