Lucene search
DellCVELIST:CVE-2021-21590HistoryJul 12, 2021 - 3:40 p.m.
CVE-2021-21590
2021-07-1215:40:17
CWE-200
dell
www.cve.org
2
dell emc unity
plain-text password storage
vulnerability
local malicious user
unauthorized access
high privileges
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
CNA Affected
[
{
"product": "Unity",
"vendor": "Dell",
"versions": [
{
"lessThan": "5.1.0.0.5.394",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Default credentials
2021-07-12 16:15:00
cve
cve
CVE-2021-21590
2021-07-12 16:15:08
nvd
nvd
CVE-2021-21590
2021-07-12 16:15:08
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for CVELIST:CVE-2021-21590