CVE-2016-0904 | BDVDB-2026-78188 Detail

Description#

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by leveraging knowledge of this key from another installation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2016/Sep/31
http://www.securityfocus.com/bid/93026
http://www.securitytracker.com/id/1036844

Exploit#

No public exploit known

History#

Version 12016-09-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.