CVE-2021-21588

Published: Jul 12, 2021Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Affected (1)

Products: Dell: Powerflex Presentation Server

1 product

Powerflex Presentation Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Powerflex Presentation Server	From 3.5 to 3.6

Related CWEs

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://www.dell.com/support/kbdoc/000189265

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000189265

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.