Lucene search

K
cvelistDellCVELIST:CVE-2021-36318
HistoryDec 21, 2021 - 5:05 p.m.

CVE-2021-36318

2021-12-2117:05:25
CWE-532
dell
www.cve.org
3
dell emc
avamar
password storage

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

12.6%

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.

CNA Affected

[
  {
    "vendor": "Dell",
    "product": "Avamar",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "18.2 19.1 19.2 19.3 19.4",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2021-36318