CVE-2021-36294

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:*
OR cpe:2.3:h:dell:vnx_vg10:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx_vg50:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx5200:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx5400:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx5600:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx5800:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx7600:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vnx8000:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-01-25 23:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-36294

Mitre link : CVE-2021-36294

CVE.ORG link : CVE-2021-36294


JSON object : View

Products Affected

dell

  • vnx7600
  • vnx5800
  • emc_unity_operating_environment
  • vnx8000
  • vnx_vg50
  • vnx5400
  • vnx5200
  • vnx_vg10
  • vnx5600
CWE
CWE-330

Use of Insufficiently Random Values

CWE-331

Insufficient Entropy