PT-2021-21234 · Dell Emc · Dell Emc Cloudlink

Published 2021-11-23 · Updated 2021-11-27 · CVE-2021-36332

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions 7.1 and all prior versions

Description The issue allows a remote low privileged attacker to potentially exploit a HTML and Javascript Injection vulnerability, directing end users to arbitrary and potentially malicious websites.

Recommendations For Dell EMC CloudLink versions 7.1 and all prior versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-36332

Affected Products

Dell Emc Cloudlink

References · 5

• https://osv.dev/vulnerability/CVE-2021-36332 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36332 · Security Note
• https://t.me/cvenotify/23838 · Telegram Post
• https://t.me/cibsecurity/32885 · Telegram Post