CVE-2021-36318
21.12.2021, 17:15
Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | emc_avamar_server | 18.2 |
| dell | emc_avamar_server | 19.1 |
| dell | emc_avamar_server | 19.2 |
| dell | emc_avamar_server | 19.3 |
| dell | emc_avamar_server | 19.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-532 - Insertion of Sensitive Information into Log FileInformation written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.