Article Number: 000222406
DSA-2024-085: Security Update for Dell Avamar Server, Dell Avamar Virtual Edition, Dell Integrated Data Protection Appliance (IDPA) for Apache Struts 2 Vulnerability.
Summary: Dell Avamar server, Dell Avamar Virtual Edition and Dell Integrated Data Protection Appliance (IDPA) remediation is available for Apache Struts 2 security vulnerabilities that could be exploited by malicious users to compromise the affected system. ...
Article Content
Impact
Critical
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| Apache Struts 2 | CVE-2023-50164 | https://nvd.nist.gov/vuln/detail/CVE-2023-50164 |
Affected Products and Remediation
- Customers who want to remediate the security vulnerabilities are advised to install the latest 19.9 Cumulative Hotfix for Dell Avamar server and Dell Avamar Virtual Edition.
- The CVEs remedied by this security update are listed in the Release Notes. The Release Notes list not only the new CVEs remedied by this update, but all the past CVEs included in this cumulative update.
- To schedule platform security patch installation, or to upgrade your server, contact Dell Customer Support at https://www.dell.com/support/home/en-us/
- Dell recommends that you always upgrade to the latest release/version for your product.
Revision History
| Revision | Date | Description |
| 1.0 | 2024-02-23 | Initial Release |
| 2.0 | 2024-04-01 | Updated Remediation link for Version 19.8 Cumulative Hotfix- 338808 |
| 3.0 | 2024-04-17 | Updated "Affected Products and Remediation" table for Version 19.10 Cumulative Hotfix-338807 |
| 4.0 | 2024-05-15 | Updated "Affected Products and Remediation" table for Version 19.10 Cumulative Hotfix-338823 |
Related Information
Legal Information
Article Properties
Affected Product
Avamar, Avamar, Avamar Server, Avamar Virtual Edition, Integrated Data Protection Appliance Family, Integrated Data Protection Appliance Software, Product Security Information
Last Published Date
15 May 2024
Version
5
Article Type
Dell Security Advisory