var-202108-0519
Vulnerability from variot
Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account. (DoS) It may be in a state
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202108-0519", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "emc data protection search", "scope": "lt", "trust": 1.0, "vendor": "dell", "version": "19.5" }, { "model": "emc integrated data protection appliance", "scope": "lt", "trust": 1.0, "vendor": "dell", "version": "2.7" }, { "model": "dell emc data protection search", "scope": null, "trust": 0.8, "vendor": "\u30c7\u30eb", "version": null }, { "model": "dell emc integrated data protection appliance", "scope": "lte", "trust": 0.8, "vendor": "\u30c7\u30eb", "version": "2.6.1 and earlier" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "cve": "CVE-2021-21601", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.9, "id": "CVE-2021-21601", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "LOW", "trust": 1.9, "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 3.9, "id": "VHN-380005", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "LOW", "trust": 0.1, "vectorString": "AV:L/AC:L/AU:N/C:P/I:N/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "nvd@nist.gov", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitabilityScore": 1.8, "id": "CVE-2021-21601", "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "security_alert@emc.com", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitabilityScore": 2.0, "id": "CVE-2021-21601", "impactScore": 6.0, "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Local", "author": "NVD", "availabilityImpact": "High", "baseScore": 7.8, "baseSeverity": "High", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2021-21601", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "Low", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2021-21601", "trust": 1.0, "value": "HIGH" }, { "author": "security_alert@emc.com", "id": "CVE-2021-21601", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2021-21601", "trust": 0.8, "value": "High" }, { "author": "CNNVD", "id": "CNNVD-202108-1013", "trust": 0.6, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-380005", "trust": 0.1, "value": "LOW" }, { "author": "VULMON", "id": "CVE-2021-21601", "trust": 0.1, "value": "LOW" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-380005" }, { "db": "VULMON", "id": "CVE-2021-21601" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "db": "NVD", "id": "CVE-2021-21601" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account. (DoS) It may be in a state", "sources": [ { "db": "NVD", "id": "CVE-2021-21601" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "VULHUB", "id": "VHN-380005" }, { "db": "VULMON", "id": "CVE-2021-21601" } ], "trust": 1.8 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2021-21601", "trust": 3.4 }, { "db": "JVNDB", "id": "JVNDB-2021-010202", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-202108-1013", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-380005", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2021-21601", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-380005" }, { "db": "VULMON", "id": "CVE-2021-21601" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "id": "VAR-202108-0519", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-380005" } ], "trust": 0.01 }, "last_update_date": "2024-08-14T14:18:24.350000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "DSA-2021-147", "trust": 0.8, "url": "https://www.dell.com/support/kbdoc/ja-jp/000189555/dell-emc-data-protection-search-security-update-for-multiple-vulnerabilities" }, { "title": "Dell EMC Data Protection Search Repair measures for log information disclosure vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159395" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "CNNVD", "id": "CNNVD-202108-1013" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-532", "trust": 1.1 }, { "problemtype": "Information leakage from log files (CWE-532) [ others ]", "trust": 0.8 } ], "sources": [ { "db": "VULHUB", "id": "VHN-380005" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.8, "url": "https://www.dell.com/support/kbdoc/000189555" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-21601" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/532.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" } ], "sources": [ { "db": "VULHUB", "id": "VHN-380005" }, { "db": "VULMON", "id": "CVE-2021-21601" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-380005" }, { "db": "VULMON", "id": "CVE-2021-21601" }, { "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "db": "NVD", "id": "CVE-2021-21601" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-08-10T00:00:00", "db": "VULHUB", "id": "VHN-380005" }, { "date": "2021-08-10T00:00:00", "db": "VULMON", "id": "CVE-2021-21601" }, { "date": "2022-06-24T00:00:00", "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "date": "2021-08-10T00:00:00", "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "date": "2021-08-10T19:15:07.577000", "db": "NVD", "id": "CVE-2021-21601" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2021-08-18T00:00:00", "db": "VULHUB", "id": "VHN-380005" }, { "date": "2021-08-18T00:00:00", "db": "VULMON", "id": "CVE-2021-21601" }, { "date": "2022-06-24T02:36:00", "db": "JVNDB", "id": "JVNDB-2021-010202" }, { "date": "2021-08-19T00:00:00", "db": "CNNVD", "id": "CNNVD-202108-1013" }, { "date": "2021-08-18T13:21:56.110000", "db": "NVD", "id": "CVE-2021-21601" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-202108-1013" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Dell\u00a0EMC\u00a0Data\u00a0Protection\u00a0Search\u00a0 and \u00a0IDPA\u00a0 Vulnerability regarding information leakage from log files in", "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-010202" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "log information leak", "sources": [ { "db": "CNNVD", "id": "CNNVD-202108-1013" } ], "trust": 0.6 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…