PT-2021-14635 · Dell · Dell Emc Unity+2

Published 2021-07-12 · Updated 2022-10-24 · CVE-2021-21591

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394

Description The issue concerns a plain-text password storage vulnerability. A local malicious user with high privileges may exploit this to gain access with the privileges of the compromised user.

Recommendations For versions prior to 5.1.0.0.5.394, update to version 5.1.0.0.5.394 or later to resolve the issue.

Fix

Information Disclosure

Insufficiently Protected Credentials

Weakness Enumeration

CWE-200

CWE-522

Related Identifiers

CVE-2021-21591

Affected Products

Dell Emc Unity

Unity Xt

Unityvsa

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-21591 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21591 · Vendor Advisory
• https://dell.com/support/kbdoc/000189204 · Vendor Advisory