CVE-2021-21601
High
Description
Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.
SeverityHigh
CVSS8.8
Exploit probability—
ProductDell Emc Data Protection Search
PublishedAug 10, 2021
First seenAug 10, 2021
Weakness typeCWE-532CWE-532
How to fix
Update
- dell emc_data_protection_search19.5 or later
- dell emc_integrated_data_protection_appliance2.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell emc_data_protection_search | v < 19.5 | 19.5 |
| dell emc_integrated_data_protection_appliance | v < 2.7 | 2.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.