CVE-2016-0903

Critical

Published: 21/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before version 7.3.0-233 rely on client-side authentication, allowing remote attackers to spoof clients and read backup data via a modified client agent.

Risk Assessment

This vulnerability poses a risk of unauthorized access to backup data, potentially leading to a loss of confidentiality of information within the organization.

Recommendation

It is recommended to upgrade to version 7.3.0-233 or later to mitigate this security flaw.

Original NVD description (English source)

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent.