CVE-2025-21117

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.

Scoring

Severity

MEDIUM

CVSS base score

6.6

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

EPSS probability

0.16%

CWE

CWE-672

Published

2025-02-05

Last modified

2026-03-12

Affected products

• Dell Avamar
• Dell Avamar
• Dell Avamar
• Dell Avamar
• Dell Avamar
• Dell Avamar

Weakness type

• CWE-672

Related vulnerabilities

• CVE-2026-53637 — Sylius: Cart FormComponent allows modification or deletion of an already-completed order
• CVE-2026-55250 — Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches
• CVE-2026-61699 — nebula-mesh: Certificate revocation is never enforced at the mesh
• CVE-2026-85044 — Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a...
• CVE-2026-19538 — Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
• CVE-2026-79010 — Operation on a resource after expiration or release in Network in Google Chrome prior to...
• CVE-2026-44725 — EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution
• CVE-2026-52733 — ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Markdown version · Browse all CVEs