CVE-2017-4989
CriticalSummary
In EMC Avamar Server Software versions 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited to view sensitive information, perform software updates, or run maintenance workflows.
Risk Assessment
The risk to the organization includes the potential for unauthorized access to sensitive data and system functions, which could lead to serious security breaches.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and implement additional security measures such as monitoring access to the system.
Original NVD description (English source)
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information, perform software updates, or run maintenance workflows.