CVE-2021-21547
Medium
Description
Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
SeverityMedium
CVSS6.4
Exploit probability—
ProductDell Unity Operating Environment
PublishedApr 30, 2021
First seenApr 30, 2021
How to fix
Update
- dell unity_operating_environment5.0.7.0.5.008 or later
- dell unity_xt_operating_environment5.0.7.0.5.008 or later
- dell unityvsa_operating_environment5.0.7.0.5.008 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell unity_operating_environment | v < 5.0.7.0.5.008 | 5.0.7.0.5.008 |
| dell unity_xt_operating_environment | v < 5.0.7.0.5.008 | 5.0.7.0.5.008 |
| dell unityvsa_operating_environment | v < 5.0.7.0.5.008 | 5.0.7.0.5.008 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.