An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized root access to the affected systems.
| Software | From | Fixed in |
|---|---|---|
| emc / integrated_data_protection_appliance | 2.0 | 2.0.x |
| emc / networker | 9.2 | 9.2.x |
| emc / networker | 9.1 | 9.1.x |
| emc / networker | 9.0 | 9.0.x |
| emc / avamar_server | 7.5-183 | 7.5-183.x |
| emc / avamar_server | 7.4-242 | 7.4-242.x |
| emc / avamar_server | 7.4-58-sp1 | 7.4-58-sp1.x |
| emc / avamar_server | 7.3-211 | 7.3-211.x |
| emc / avamar_server | 7.3-226 | 7.3-226.x |
| emc / avamar_server | 7.3-233 | 7.3-233.x |
| emc / avamar_server | 7.3-125-sp1 | 7.3-125-sp1.x |
| emc / avamar_server | 7.2-309 | 7.2-309.x |
| emc / avamar_server | 7.2-401 | 7.2-401.x |
| emc / avamar_server | 7.2-32-sp1 | 7.2-32-sp1.x |
| emc / avamar_server | 7.1-302 | 7.1-302.x |
| emc / avamar_server | 7.1-370 | 7.1-370.x |
| emc / avamar_server | 7.1-145-sp1 | 7.1-145-sp1.x |
| emc / avamar_server | 7.1-21-sp2 | 7.1-21-sp2.x |