← Back

CVE-2021-36338

nvd nist
Published: Jan 21, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD

Description

Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.

Affected (13)

Dell
7 products
Powermax Os
Solutions Enabler
Solutions Enabler Virtual Appliance
Unisphere 360
Unisphere For Powermax
Unisphere For Powermax Virtual Appliance
Vasa
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Powermax Os
Version 5978
Dell
Solutions Enabler
Before 9.1.0.18
Solutions Enabler
From 9.2.0.0 to 9.2.3.0
Dell
Solutions Enabler Virtual Appliance
Before 9.1.0.18
Solutions Enabler Virtual Appliance
From 9.2.0.0 to 9.2.3.0
Dell
Unisphere 360
Before 9.1.0.29
Unisphere 360
From 9.2.0.0 to 9.2.3.3
Dell
Unisphere For Powermax
Before 9.1.0.31
Unisphere For Powermax
From 9.2.0.0 to 9.2.3.4
Dell
Unisphere For Powermax Virtual Appliance
Before 9.1.0.31
Unisphere For Powermax Virtual Appliance
From 9.2.0.0 to 9.2.3.4
Dell
Vasa
Before 9.1.0.723
Vasa
From 9.2.0.0 to 9.2.3.0

Related CWEs

CWE-565
Reliance on Cookies without Validation and Integrity Checking
The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.
CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (2)

Source: security_alert@emc.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.