Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.
Weakness
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Avamar_server | Dell | 19.4 (including) | 19.4 (including) |
| Avamar_server | Dell | 19.7 (including) | 19.7 (including) |
| Avamar_server | Dell | 19.8 (including) | 19.8 (including) |
| Avamar_server | Dell | 19.9 (including) | 19.9 (including) |
| Avamar_server | Dell | 19.10 (including) | 19.10 (including) |
| Avamar_server | Dell | 19.10-sp1 (including) | 19.10-sp1 (including) |