CVE-2025-21117

Dell / Avamar PUBLISHED

Description (CNA)

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.

Affected (CNA)

Vendor / product	Versions
Dell / Avamar	affected 19.4; affected 19.7; affected 19.8; affected 19.9; affected 19.10; affected 19.10 SP1

CWE

CWE-672

References

https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.