CVE-2018-11067: Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability

Security readout for executives and security teams

This flaw lets an attacker use a trusted Dell EMC Avamar or IDPA link to send a user to another website. The main business risk is phishing: users may believe they are following a legitimate backup-management URL and land on a malicious site. Exposure is limited to organizations running the affected Dell EMC Avamar Server versions or IDPA 2.0, 2.1, or 2.2. Risk depends on whether users can access the affected Client Manager interface and may trust links referencing it. Treat this as a phishing-enablement issue, not an infrastructure takeover based on available sources. Prioritize environments where backup administrators use affected Dell EMC web interfaces and where those URLs are trusted in email or internal messaging. Mitigation focus: Check Dell EMC or VMware advisory guidance for fixed versions or official remediation.; Inventory Avamar and IDPA versions against the affected version list.; Limit user access to affected management interfaces until remediation is confirmed..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.