5.8
CVSSv2

CVE-2018-11067

Published: 26/11/2018 Updated: 02/01/2019
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dell emc avamar 7.5.1

dell emc avamar 7.5.0

dell emc avamar 7.4.1

dell emc avamar 7.4.0

dell emc integrated data protection appliance 2.1

dell emc integrated data protection appliance 2.0

dell emc avamar 7.3.0

dell emc avamar 7.2.1

dell emc integrated data protection appliance 2.2

dell emc avamar 18.1

dell emc avamar 7.3.1

dell emc avamar 7.2.0

vmware vsphere data protection 6.0.7

vmware vsphere data protection 6.0.8

vmware vsphere data protection 6.1.0

vmware vsphere data protection 6.1.1

vmware vsphere data protection 6.0.3

vmware vsphere data protection 6.0.5

vmware vsphere data protection 6.1.3

vmware vsphere data protection 6.1.5

vmware vsphere data protection 6.0.0

vmware vsphere data protection 6.0.1

vmware vsphere data protection 6.0.2

vmware vsphere data protection 6.1.7

vmware vsphere data protection 6.1.8

vmware vsphere data protection 6.1.9

vmware vsphere data protection 6.0.4

vmware vsphere data protection 6.0.6

vmware vsphere data protection 6.1.2

vmware vsphere data protection 6.1.4

vmware vsphere data protection 6.1.6