PT-2021-21228 · Dell Emc · Dell Emc Streaming Data Platform

Published 2021-11-30 · Updated 2021-12-01 · CVE-2021-36326

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3

Description The issue allows a remote unauthenticated attacker to potentially exploit an SSL Strip Vulnerability in the User Interface (UI), leading to a downgrade in the communications between the client and server into an unencrypted format.

Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the User Interface (UI) to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-757

Related Identifiers

CVE-2021-36326

Affected Products

Dell Emc Streaming Data Platform

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-36326 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36326 · Vendor Advisory
• https://dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-third-party-vulnerabilities · Vendor Advisory
• https://t.me/cibsecurity/33151 · Telegram Post