DSA-2022-105: Dell Avamar Server and Avamar Virtual Edition Security Update for Apache Struts2 Vulnerability
Résumé: Dell Avamar Server and Avamar Virtual Edition remediation is available for the Apache Struts2 Vulnerability that may be exploited by malicious users to compromise the affected system.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
Critical
Détails
| Third-party Component | CVE | More information |
| Apache Struts2 | CVE-2020-17530 | https://nvd.nist.gov/vuln/detail/CVE-2020-17530 |
| Third-party Component | CVE | More information |
| Apache Struts2 | CVE-2020-17530 | https://nvd.nist.gov/vuln/detail/CVE-2020-17530 |
Produits concernés et mesure corrective
| Product | Affected Versions | Updated Versions | Update Link |
| Avamar Server, Avamar Virtual Edition | 19.3 and 19.4 | 19.7 | Support for Avamar Server | Drivers & Downloads |
| PowerProtect DP Series Appliance and Integrated Data Protection Appliance | 2.7.x (Includes Protection Software Avamar version 19.4). | 2.7.2 or later with 19.4 MC Hotfix | Avamar 19.4 MC Cumulative Hotfix for Avamar Server and Avamar Virtual Edition November 2022 (Hotfix 337055) |
| 2.6.x (Includes Protection Software Avamar 19.3). | Apply Protection Software Avamar MC hotfix that is expected to be available for 19.3. | Links will be available once the hotfix is released. |
NOTE: The next Avamar 19.3 MC hotfix will include a fix for the Apache struts vulnerability issue.
For Integration Data Protection Appliance systems, update to Integration Data Protection Appliance 2.7.2 first before applying the MC Hotfix on Backup Server.
For Integration Data Protection Appliance systems, update to Integration Data Protection Appliance 2.7.2 first before applying the MC Hotfix on Backup Server.
| Product | Affected Versions | Updated Versions | Update Link |
| Avamar Server, Avamar Virtual Edition | 19.3 and 19.4 | 19.7 | Support for Avamar Server | Drivers & Downloads |
| PowerProtect DP Series Appliance and Integrated Data Protection Appliance | 2.7.x (Includes Protection Software Avamar version 19.4). | 2.7.2 or later with 19.4 MC Hotfix | Avamar 19.4 MC Cumulative Hotfix for Avamar Server and Avamar Virtual Edition November 2022 (Hotfix 337055) |
| 2.6.x (Includes Protection Software Avamar 19.3). | Apply Protection Software Avamar MC hotfix that is expected to be available for 19.3. | Links will be available once the hotfix is released. |
NOTE: The next Avamar 19.3 MC hotfix will include a fix for the Apache struts vulnerability issue.
For Integration Data Protection Appliance systems, update to Integration Data Protection Appliance 2.7.2 first before applying the MC Hotfix on Backup Server.
For Integration Data Protection Appliance systems, update to Integration Data Protection Appliance 2.7.2 first before applying the MC Hotfix on Backup Server.
Historique des révisions
| Revision | Date | Description | |
| 1.0 | 2022-08-12 | Initial Release | |
| 2.0 | 2022-09-01 | Added prior releases note and added TBD for affected version. | |
| 3.0 | 2022-09-07 | Note about next MC ETA | |
| 4.0 | 2022-11-09 | Minor Change (Affected Version Column and Note) | |
| 5.0 | 2022-12-12 | Changes in Updated Links Column and Notes Section | |
| 6.0 | 2023-03-01 | Minor Changes in Summary and Title |
Informations connexes
Mention légale
Produits concernés
PowerProtect Data Protection Appliance, Avamar Server, Avamar Virtual Edition, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, PowerProtect Data Protection Hardware, Integrated Data Protection Appliance Software
, PowerProtect Software, Product Security Information
...
Propriétés de l’article
Numéro d’article: 000202650
Type d’article: Dell Security Advisory
Dernière modification: 19 sept. 2025
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.