CVE-2021-21591 in EMC Unity

الملخص

بحسب MITRE • 12/07/2021

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: Dell
• حجز: 04/01/2021
• إفشاء: 12/07/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-178312
• CPE: جاهز
• CWE: CWE-312 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00198
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-21591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-21591
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-21591/