Sign-up

ID

VAR-202108-0519


CVE

CVE-2021-21601


TITLE

Dell EMC Data Protection Search  and  IDPA  Vulnerability regarding information leakage from log files in

Trust: 0.8

sources: JVNDB: JVNDB-2021-010202

DESCRIPTION

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account. (DoS) It may be in a state

Trust: 1.8

sources: NVD: CVE-2021-21601 // JVNDB: JVNDB-2021-010202 // VULHUB: VHN-380005 // VULMON: CVE-2021-21601

AFFECTED PRODUCTS

vendor:dellmodel:emc data protection searchscope:ltversion:19.5

Trust: 1.0

vendor:dellmodel:emc integrated data protection appliancescope:ltversion:2.7

Trust: 1.0

vendor:デルmodel:dell emc data protection searchscope: - version: -

Trust: 0.8

vendor:デルmodel:dell emc integrated data protection appliancescope:lteversion:2.6.1 and earlier

Trust: 0.8

sources: JVNDB: JVNDB-2021-010202 // NVD: CVE-2021-21601

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-21601
value: HIGH

Trust: 1.0

security_alert@emc.com: CVE-2021-21601
value: HIGH

Trust: 1.0

NVD: CVE-2021-21601
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202108-1013
value: HIGH

Trust: 0.6

VULHUB: VHN-380005
value: LOW

Trust: 0.1

VULMON: CVE-2021-21601
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2021-21601
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-380005
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-21601
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

security_alert@emc.com: CVE-2021-21601
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.0
impactScore: 6.0
version: 3.1

Trust: 1.0

NVD: CVE-2021-21601
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-380005 // VULMON: CVE-2021-21601 // JVNDB: JVNDB-2021-010202 // CNNVD: CNNVD-202108-1013 // NVD: CVE-2021-21601 // NVD: CVE-2021-21601

PROBLEMTYPE DATA

problemtype:CWE-532

Trust: 1.1

problemtype:Information leakage from log files (CWE-532) [ others ]

Trust: 0.8

sources: VULHUB: VHN-380005 // JVNDB: JVNDB-2021-010202 // NVD: CVE-2021-21601

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202108-1013

TYPE

log information leak

Trust: 0.6

sources: CNNVD: CNNVD-202108-1013

PATCH

title:DSA-2021-147url:https://www.dell.com/support/kbdoc/ja-jp/000189555/dell-emc-data-protection-search-security-update-for-multiple-vulnerabilities

Trust: 0.8

title:Dell EMC Data Protection Search Repair measures for log information disclosure vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159395

Trust: 0.6

sources: JVNDB: JVNDB-2021-010202 // CNNVD: CNNVD-202108-1013

EXTERNAL IDS

db:NVDid:CVE-2021-21601

Trust: 3.4

db:JVNDBid:JVNDB-2021-010202

Trust: 0.8

db:CNNVDid:CNNVD-202108-1013

Trust: 0.6

db:VULHUBid:VHN-380005

Trust: 0.1

db:VULMONid:CVE-2021-21601

Trust: 0.1

sources: VULHUB: VHN-380005 // VULMON: CVE-2021-21601 // JVNDB: JVNDB-2021-010202 // CNNVD: CNNVD-202108-1013 // NVD: CVE-2021-21601

REFERENCES

url:https://www.dell.com/support/kbdoc/000189555

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2021-21601

Trust: 0.8

url:https://cwe.mitre.org/data/definitions/532.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-380005 // VULMON: CVE-2021-21601 // JVNDB: JVNDB-2021-010202 // CNNVD: CNNVD-202108-1013 // NVD: CVE-2021-21601

SOURCES

db:VULHUBid:VHN-380005
db:VULMONid:CVE-2021-21601
db:JVNDBid:JVNDB-2021-010202
db:CNNVDid:CNNVD-202108-1013
db:NVDid:CVE-2021-21601

LAST UPDATE DATE

2024-08-14T14:18:24.350000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-380005date:2021-08-18T00:00:00
db:VULMONid:CVE-2021-21601date:2021-08-18T00:00:00
db:JVNDBid:JVNDB-2021-010202date:2022-06-24T02:36:00
db:CNNVDid:CNNVD-202108-1013date:2021-08-19T00:00:00
db:NVDid:CVE-2021-21601date:2021-08-18T13:21:56.110

SOURCES RELEASE DATE

db:VULHUBid:VHN-380005date:2021-08-10T00:00:00
db:VULMONid:CVE-2021-21601date:2021-08-10T00:00:00
db:JVNDBid:JVNDB-2021-010202date:2022-06-24T00:00:00
db:CNNVDid:CNNVD-202108-1013date:2021-08-10T00:00:00
db:NVDid:CVE-2021-21601date:2021-08-10T19:15:07.577