CVE-2019-3765

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.

• CWE-732
• CWE-732

• https://www.dell.com/support/security/en-us/details/537649/DSA-2019-138-Dell-EMC-Avamar-Incorrect-Permission-Assignment-for-Critical-Resource-VulnerabilityVendor Advisory
• https://www.dell.com/support/security/en-us/details/537649/DSA-2019-138-Dell-EMC-Avamar-Incorrect-Permission-Assignment-for-Critical-Resource-VulnerabilityVendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3759The RSA Identity Governance and Lifecycle software and RSA V…8.1
• CVE-2019-3760The RSA Identity Governance and Lifecycle software and RSA V…8.8
• CVE-2019-3761The RSA Identity Governance and Lifecycle software and RSA V…5.4
• CVE-2019-3762Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and…7.5
• CVE-2019-3763The RSA Identity Governance and Lifecycle software and RSA V…7.8
• CVE-2019-3764Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 version…4.3
• CVE-2019-3766Dell EMC ECS versions prior to 3.4.0.0 contain an improper r…9.8
• CVE-2019-3767Dell ImageAssist versions prior to 8.7.15 contain an informa…8.2
• CVE-2019-3768RSA Authentication Manager versions prior to 8.4 P7 contain …6.5
• CVE-2019-3769Dell Wyse Management Suite versions prior to 1.4.1 contain a…6.4
• CVE-2019-3770Dell Wyse Management Suite versions prior to 1.4.1 contain a…6.4
• CVE-2019-3772Spring Integration (spring-integration-xml and spring-integr…