CVE-2021-21601

dell emc data protection search, dell emc integrated data protection appliance

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-21601

Katalog CVE

CVSS 7.8 · High EPSS 0,24%

Kerentanan Insertion of Sensitive Information into Log File pada dell emc data protection search, dell emc integrated data protection appliance. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.

Rincian

Terbit di NVD
10 Agustus 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-532: Insertion of Sensitive Information into Log File
EPSS (30 hari)
0,24% peluang dieksploitasi; lebih tinggi dari 13,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell emc data protection search Semua versi sebelum 19.5
dell emc integrated data protection appliance Semua versi sebelum 2.7

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.