Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/write restricted files
References
Configurations
Configuration 1 (hide)
AND |
|
History
14 Apr 2022, 19:04
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:dell:vnx8000:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx5400:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx5800:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx5600:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx7600:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx_vg50:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnxe1600:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx_vg10:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vnx5200:-:*:*:*:*:*:*:* cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:* |
|
First Time |
Dell vnx8000
Dell vnx7600 Dell vnx5200 Dell vnx5600 Dell Dell vnx5400 Dell vnxe1600 Dell vnx Vg10 Dell emc Unity Operating Environment Dell vnx5800 Dell vnx Vg50 |
|
CWE | CWE-22 | |
CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 9.1 |
References | (MISC) https://www.dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities - Vendor Advisory |
08 Apr 2022, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-08 20:15
Updated : 2023-12-10 14:22
NVD link : CVE-2021-36288
Mitre link : CVE-2021-36288
CVE.ORG link : CVE-2021-36288
JSON object : View
Products Affected
dell
- vnx5200
- emc_unity_operating_environment
- vnx5600
- vnx_vg50
- vnx_vg10
- vnx5800
- vnx7600
- vnx8000
- vnxe1600
- vnx5400
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')