2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"VxRail","vendor":"Dell","versions":[{"lessThan":"7.0.200","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account."},{"lang":"es","value":"Las versiones de Dell VxRail anteriores a la 7.0.200 contienen una vulnerabilidad de almacenamiento de contraseñas en texto plano en VxRail Manager. Un usuario sys-admin puede explotar esta vulnerabilidad, lo que lleva a la divulgación de ciertas credenciales de usuario. El atacante podría usar las credenciales expuestas para acceder a la aplicación vulnerable con privilegios de la cuenta comprometida."}],"id":"CVE-2021-21508","lastModified":"2026-07-23T16:10:00.137","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"security_alert@emc.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2021-21508","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-22T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-05-22T15:16:24.827","references":[{"source":"security_alert@emc.com","url":"https://dellservices.lightning.force.com/lightning/r/Lightning_Knowledge__kav/ka0Do000000m7VwIAI/view"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-532"}],"source":"security_alert@emc.com","type":"Secondary"}]}
|