CVE-2025-21117 - Vulnerability Details

Vendors	Products
Dell	Avamar Server

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities

Type	Values Removed	Values Added
First Time appeared		Dell Dell avamar Server
CPEs		cpe:2.3:a:dell:avamar_server:19.10:-:::::: cpe:2.3:a:dell:avamar_server:19.10:sp1:::::: cpe:2.3:a:dell:avamar_server:19.4:::::::* cpe:2.3:a:dell:avamar_server:19.7:::::::* cpe:2.3:a:dell:avamar_server:19.8:::::::* cpe:2.3:a:dell:avamar_server:19.9:::::::*
Vendors & Products		Dell Dell avamar Server

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.
Weaknesses		CWE-672
References		https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-21117", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "state": "PUBLISHED", "assignerShortName": "dell", "dateReserved": "2024-11-23T06:04:00.842Z", "datePublished": "2025-02-05T13:10:39.190Z", "dateUpdated": "2025-02-12T20:51:29.850Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Avamar", "vendor": "Dell", "versions": [{"status": "affected", "version": "19.4"}, {"status": "affected", "version": "19.7"}, {"status": "affected", "version": "19.8"}, {"status": "affected", "version": "19.9"}, {"status": "affected", "version": "19.10"}, {"status": "affected", "version": "19.10 SP1"}]}], "datePublic": "2025-02-04T18:30:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.<br>"}], "value": "Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-672", "description": "CWE-672: Operation on a Resource after Expiration or Release", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2025-02-05T13:10:39.190Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-21117", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-05T13:55:27.569265Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:51:29.850Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-21117 (string)

assignerOrgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

state : PUBLISHED (string)

assignerShortName : dell (string)

dateReserved : 2024-11-23T06:04:00.842Z (string)

datePublished : 2025-02-05T13:10:39.190Z (string)

dateUpdated : 2025-02-12T20:51:29.850Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Avamar (string)

vendor : Dell (string)

versions : [ »

0 : { »

status : affected (string)

version : 19.4 (string)

}

1 : { »

status : affected (string)

version : 19.7 (string)

}

2 : { »

status : affected (string)

version : 19.8 (string)

}

3 : { »

status : affected (string)

version : 19.9 (string)

}

4 : { »

status : affected (string)

version : 19.10 (string)

}

5 : { »

status : affected (string)

version : 19.10 SP1 (string)

}

]

}

]

datePublic : 2025-02-04T18:30:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.<br> (string)

}

]

value : Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-672 (string)

description : CWE-672: Operation on a Resource after Expiration or Release (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

shortName : dell (string)

dateUpdated : 2025-02-05T13:10:39.190Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

]

url : https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-21117 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-05T13:55:27.569265Z (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-12T20:51:29.850Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-21117", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-05T13:55:27.569265Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:43:02.066Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Dell", "product": "Avamar", "versions": [{"status": "affected", "version": "19.4"}, {"status": "affected", "version": "19.7"}, {"status": "affected", "version": "19.8"}, {"status": "affected", "version": "19.9"}, {"status": "affected", "version": "19.10"}, {"status": "affected", "version": "19.10 SP1"}], "defaultStatus": "unaffected"}], "datePublic": "2025-02-04T18:30:00.000Z", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.", "supportingMedia": [{"type": "text/html", "value": "Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-672", "description": "CWE-672: Operation on a Resource after Expiration or Release"}]}], "providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2025-02-05T13:10:39.190Z"}}}, "cveMetadata": {"cveId": "CVE-2025-21117", "state": "PUBLISHED", "dateUpdated": "2025-02-12T20:51:29.850Z", "dateReserved": "2024-11-23T06:04:00.842Z", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "datePublished": "2025-02-05T13:10:39.190Z", "assignerShortName": "dell"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-21117 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-05T13:55:27.569265Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-12T20:43:02.066Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.6 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Dell (string)

product : Avamar (string)

versions : [ »

0 : { »

status : affected (string)

version : 19.4 (string)

}

1 : { »

status : affected (string)

version : 19.7 (string)

}

2 : { »

status : affected (string)

version : 19.8 (string)

}

3 : { »

status : affected (string)

version : 19.9 (string)

}

4 : { »

status : affected (string)

version : 19.10 (string)

}

5 : { »

status : affected (string)

version : 19.10 SP1 (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2025-02-04T18:30:00.000Z (string)

references : [ »

0 : { »

url : https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user.<br> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-672 (string)

description : CWE-672: Operation on a Resource after Expiration or Release (string)

}

]

}

]

providerMetadata : { »

orgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

shortName : dell (string)

dateUpdated : 2025-02-05T13:10:39.190Z (string)

}

cveMetadata : { »

cveId : CVE-2025-21117 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-12T20:51:29.850Z (string)

dateReserved : 2024-11-23T06:04:00.842Z (string)

assignerOrgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

datePublished : 2025-02-05T13:10:39.190Z (string)

assignerShortName : dell (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dell:avamar_server:19.4:*:*:*:*:*:*:*", "matchCriteriaId": "A19DD36F-1EE9-4FBF-9968-DF270C5FD1C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:avamar_server:19.7:*:*:*:*:*:*:*", "matchCriteriaId": "D8C50D2C-B787-4366-AAED-057F9439A6A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:avamar_server:19.8:*:*:*:*:*:*:*", "matchCriteriaId": "41028ABC-C574-42AE-897B-E1C65CD0D0BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:avamar_server:19.9:*:*:*:*:*:*:*", "matchCriteriaId": "2B1D9257-AA6C-4D68-B209-E72128A017D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:avamar_server:19.10:-:*:*:*:*:*:*", "matchCriteriaId": "7ADB97BD-3E80-439D-950C-93EF391DDA8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:avamar_server:19.10:sp1:*:*:*:*:*:*", "matchCriteriaId": "D0075FDA-26E4-4687-9D94-21283E2B5028", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user."}, {"lang": "es", "value": "Dell Avamar, versi\u00f3n 19.4 o posterior, contiene una vulnerabilidad de reutilizaci\u00f3n de token de acceso en la interfaz de usuario de autenticaci\u00f3n. Un atacante local con pocos privilegios podr\u00eda aprovechar esta vulnerabilidad y suplantar por completo la identidad del usuario."}], "id": "CVE-2025-21117", "lastModified": "2025-03-28T13:24:51.620", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 5.2, "source": "security_alert@emc.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-02-05T14:15:27.417", "references": [{"source": "security_alert@emc.com", "tags": ["Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-672"}], "source": "security_alert@emc.com", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.4:*:*:*:*:*:*:* (string)

matchCriteriaId : A19DD36F-1EE9-4FBF-9968-DF270C5FD1C4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.7:*:*:*:*:*:*:* (string)

matchCriteriaId : D8C50D2C-B787-4366-AAED-057F9439A6A5 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 41028ABC-C574-42AE-897B-E1C65CD0D0BB (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.9:*:*:*:*:*:*:* (string)

matchCriteriaId : 2B1D9257-AA6C-4D68-B209-E72128A017D1 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.10:-:*:*:*:*:*:* (string)

matchCriteriaId : 7ADB97BD-3E80-439D-950C-93EF391DDA8F (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:dell:avamar_server:19.10:sp1:*:*:*:*:*:* (string)

matchCriteriaId : D0075FDA-26E4-4687-9D94-21283E2B5028 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user. (string)

}

1 : { »

lang : es (string)

value : Dell Avamar, versión 19.4 o posterior, contiene una vulnerabilidad de reutilización de token de acceso en la interfaz de usuario de autenticación. Un atacante local con pocos privilegios podría aprovechar esta vulnerabilidad y suplantar por completo la identidad del usuario. (string)

}

]

id : CVE-2025-21117 (string)

lastModified : 2025-03-28T13:24:51.620 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.3 (number)

impactScore : 5.2 (number)

source : security_alert@emc.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-02-05T14:15:27.417 (string)

references : [ »

0 : { »

source : security_alert@emc.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.dell.com/support/kbdoc/en-us/000281275/dsa-2025-071-security-update-for-dell-avamar-for-multiple-component-vulnerabilities (string)

}

]

sourceIdentifier : security_alert@emc.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-672 (string)

}

]

source : security_alert@emc.com (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object