CVE-2021-36318

Опубликовано: 21 дек. 2021

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.

Ссылки

https://security.gentoo.org/glsa/202210-09
Third Party Advisory
https://www.dell.com/support/kbdoc/000193369
Patch
Vendor Advisory
https://security.gentoo.org/glsa/202210-09
Third Party Advisory
https://www.dell.com/support/kbdoc/000193369
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:emc_avamar_server:18.2:*:*:*:*:*:*:*

cpe:2.3:a:dell:emc_avamar_server:19.1:*:*:*:*:*:*:*

cpe:2.3:a:dell:emc_avamar_server:19.2:*:*:*:*:*:*:*

cpe:2.3:a:dell:emc_avamar_server:19.3:*:*:*:*:*:*:*

cpe:2.3:a:dell:emc_avamar_server:19.4:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00041

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-532

CWE-522

Связанные уязвимости

GHSA-r96m-rq4f-96v2