CVE-2021-36317
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Dell EMC Avamar Server versión 19.4, contiene una vulnerabilidad de almacenamiento de contraseñas de texto plano en AvInstaller. Un atacante local podría explotar esta vulnerabilidad, conllevando a una divulgación de determinadas credenciales de usuario. El atacante podría usar las credenciales expuestas para acceder a la aplicación vulnerable con los privilegios de la cuenta comprometida
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-07-08 CVE Reserved
- 2021-12-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-256: Plaintext Storage of a Password
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.dell.com/support/kbdoc/000193369 | 2022-11-07 |
URL | Date | SRC |
---|---|---|
https://security.gentoo.org/glsa/202210-09 | 2022-11-07 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Emc Avamar Server Search vendor "Dell" for product "Emc Avamar Server" | 19.4 Search vendor "Dell" for product "Emc Avamar Server" and version "19.4" | - |
Affected
| ||||||
Dell Search vendor "Dell" | Emc Powerprotect Data Protection Appliance Search vendor "Dell" for product "Emc Powerprotect Data Protection Appliance" | 2.7 Search vendor "Dell" for product "Emc Powerprotect Data Protection Appliance" and version "2.7" | - |
Affected
|