Dell EMC Avamar And Integrated Data Protection Appliance Invalid Access Control
Posted on 11 April 2018
DELL EMC Avamar fails to restrict access to Configuration section that let Administrators set up Installation Manager configurations, or check for new packages from the Online Support site. An unauthenticated, remote attacker could add an Online Support Account for DELL EMC without any user interaction.