CVE-2021-36330

High

Description

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user.

SeverityHigh
CVSS8.1
Exploit probability—
ProductDell Emc Streaming Data Platform
PublishedNov 30, 2021
First seenNov 30, 2021
Weakness typeCWE-613CWE-613

How to fix

Update
  • dell emc_streaming_data_platform1.3 or later

Affected products

ProductAffected versionsFixed in
dell emc_streaming_data_platformv < 1.31.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.