CVE-2019-3737

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar ADMe Web Interface versions 1.0.50 through 1.0.51

Description The issue allows a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application. This is related to a Local File Inclusion (LFI) vulnerability.

Recommendations For versions 1.0.50 and 1.0.51, consider restricting access to the Web Interface application until a fix is available. As a temporary workaround, avoid using the Web Interface application for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.