CVE-2021-21512: Dell Cyber Recovery, изтичане на данни

Описание

Оригинално описание

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account.

Засегнати продукти

• Dell Cyber Recovery: unspecified преди 19.7.0.2

Вид слабост

• CWE-200 Разкриване на чувствителна информация пред неоторизирана страна

История

Други уязвимости в Dell Cyber Recovery

• 7.6CVE-2026-79938
• 5.8CVE-2026-79939
• 6.5CVE-2026-49809
• 9.8CVE-2022-34372
• 7.8CVE-2022-32481

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-21512
• https://nvd.nist.gov/vuln/detail/CVE-2021-21512
• https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure