CVE-2021-21531
30.04.2021, 21:15
Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | solutions_enabler | 𝑥 < 9.1.0.15 |
| dell | solutions_enabler | 9.2.0 ≤ 𝑥 < 9.2.1.6 |
| dell | solutions_enabler_virtual_appliance | 𝑥 < 9.1.0.15 |
| dell | solutions_enabler_virtual_appliance | 9.2.0 ≤ 𝑥 < 9.2.1.1 |
| dell | unisphere_for_powermax | 𝑥 < 9.1.0.26 |
| dell | unisphere_for_powermax | 9.2.1.0 ≤ 𝑥 ≤ 9.2.1.6 |
| dell | unisphere_for_powermax_virtual_appliance | 𝑥 < 9.1.0.26 |
| dell | unisphere_for_powermax_virtual_appliance | 9.2.1.0 ≤ 𝑥 < 9.2.1.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-602 - Client-Side Enforcement of Server-Side SecurityThe product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
- CWE-669 - Incorrect Resource Transfer Between SpheresThe product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.