Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21567 State: PUBLISHED Published: 2021-08-10T19:05:16.264629Z Last Updated: 2024-09-16T22:56:45.568Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-732 Description: Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE to elevate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189495
CVE ID: CVE-2021-21568 State: PUBLISHED Published: 2021-08-16T22:00:21.845964Z Last Updated: 2024-09-17T00:46:07.151Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make un-audited and un-trackable configuration changes to settings that their roles have privileges to change. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000190408
CVE ID: CVE-2021-21569 State: PUBLISHED Published: 2021-09-28T19:20:19.832597Z Last Updated: 2024-09-17T03:08:31.825Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: NetWorker Problem Types: CWE-78 Description: Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188311/
CVE ID: CVE-2021-21570 State: PUBLISHED Published: 2021-09-28T19:20:21.333236Z Last Updated: 2024-09-17T04:10:03.163Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: NetWorker Problem Types: CWE-78 Description: Dell NetWorker, versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188311/dsa-2021-124-dell-networker-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21571 State: PUBLISHED Published: 2021-06-24T17:00:15.004545Z Last Updated: 2024-09-16T17:14:18.169Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Dell Products: UEFI BIOS https stack Problem Types: CWE-295 Description: Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000
tampering. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188682
CVE ID: CVE-2021-21572 State: PUBLISHED Published: 2021-06-24T17:00:16.600794Z Last Updated: 2024-09-16T19:30:31.142Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: BIOSConnect Problem Types: CWE-122 Description: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188682
CVE ID: CVE-2021-21573 State: PUBLISHED Published: 2021-06-24T17:00:18.090009Z Last Updated: 2024-09-17T01:11:41.809Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: BIOSConnect Problem Types: CWE-121 Description: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188682
CVE ID: CVE-2021-21574 State: PUBLISHED Published: 2021-06-24T17:00:19.574722Z Last Updated: 2024-09-16T21:08:05.986Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: BIOSConnect Problem Types: CWE-121 Description: Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000188682
CVE ID: CVE-2021-21575 State: PUBLISHED Published: 2024-02-02T15:53:52.071Z Last Updated: 2024-08-03T18:16:23.561Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: BSAFE Micro Edition Suite Problem Types: CWE-208 Description: Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000189462/dsa-2021-131-dell-bsafetm-micro-edition-suite-multiple-vulnerabilities
CVE ID: CVE-2021-21576 State: PUBLISHED Published: 2021-08-03T15:30:17.168790Z Last Updated: 2024-09-17T00:02:27.560Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21577 State: PUBLISHED Published: 2021-08-03T15:30:18.797761Z Last Updated: 2024-09-17T00:26:04.837Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21578 State: PUBLISHED Published: 2021-08-03T15:30:20.317411Z Last Updated: 2024-09-16T23:20:26.805Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-601 Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21579 State: PUBLISHED Published: 2021-08-03T15:30:21.853844Z Last Updated: 2024-09-16T20:32:58.837Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-601 Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21580 State: PUBLISHED Published: 2021-08-03T15:30:23.368761Z Last Updated: 2024-09-16T17:33:01.755Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-74 Description: Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/0001891
legitimate. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21581 State: PUBLISHED Published: 2021-08-03T15:30:24.882298Z Last Updated: 2024-09-16T22:39:59.220Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189193
CVE ID: CVE-2021-21584 State: PUBLISHED Published: 2021-08-09T21:05:21.874871Z Last Updated: 2024-09-17T02:52:25.417Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: CWE-200 Description: Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially exploit this vulnerability leading to disclosure of the OIDC server credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189673
CVE ID: CVE-2021-21585 State: PUBLISHED Published: 2021-08-09T21:05:29.841810Z Last Updated: 2024-09-16T23:45:26.976Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: Other Description: Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this vulnerability to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189673
CVE ID: CVE-2021-21586 State: PUBLISHED Published: 2021-07-15T16:15:12.894335Z Last Updated: 2024-09-17T01:31:36.108Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-36 Description: Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189363
CVE ID: CVE-2021-21587 State: PUBLISHED Published: 2021-07-15T16:15:14.433281Z Last Updated: 2024-09-16T17:48:44.545Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-200 Description: Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of files and folders. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189363
CVE ID: CVE-2021-21588 State: PUBLISHED Published: 2021-07-12T15:40:14.345151Z Last Updated: 2024-09-17T00:15:37.249Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerFlex Problem Types: CWE-345 Description: Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189265
CVE ID: CVE-2021-21589 State: PUBLISHED Published: 2021-07-12T15:40:15.913458Z Last Updated: 2024-09-17T03:58:38.925Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: Unity Problem Types: Other Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189204
CVE ID: CVE-2021-21590 State: PUBLISHED Published: 2021-07-12T15:40:17.409613Z Last Updated: 2024-09-16T20:57:44.496Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-200 Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189204
CVE ID: CVE-2021-21591 State: PUBLISHED Published: 2021-07-12T15:40:18.944714Z Last Updated: 2024-09-17T03:48:49.687Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-200 Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189204
CVE ID: CVE-2021-21592 State: PUBLISHED Published: 2021-08-16T22:00:23.452685Z Last Updated: 2024-09-17T02:37:24.656Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-755 Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000190408
CVE ID: CVE-2021-21594 State: PUBLISHED Published: 2021-08-16T22:00:25.089326Z Last Updated: 2024-09-16T22:45:21.795Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-598 Description: Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclosure of sensitive data. Dell recommends upgrading at your earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000190408
CVE ID: CVE-2021-21595 State: PUBLISHED Published: 2021-08-16T22:00:26.638260Z Last Updated: 2024-09-17T00:30:51.199Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-77 Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.del
te/upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000190408
CVE ID: CVE-2021-21596 State: PUBLISHED Published: 2021-08-09T21:05:31.508558Z Last Updated: 2024-09-17T03:29:07.090Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: CWE-200 Description: Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution vulnerability. A malicious attacker with access to the immediate subnet may potentially exploit this vulnerability leading to information disclosure and a possible elevation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https:/
closure and a possible elevation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189673
CVE ID: CVE-2021-21597 State: PUBLISHED Published: 2021-08-10T19:05:17.813579Z Last Updated: 2024-09-16T23:06:44.053Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Wyse ThinOS Problem Types: CWE-532 Description: Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189543
CVE ID: CVE-2021-21598 State: PUBLISHED Published: 2021-08-10T19:05:22.591684Z Last Updated: 2024-09-17T04:25:09.114Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse ThinOS Problem Types: CWE-532 Description: Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189543
CVE ID: CVE-2021-21599 State: PUBLISHED Published: 2021-08-16T22:00:28.315158Z Last Updated: 2024-09-17T03:19:01.501Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE to escalate privileges and escape the compliance guarantees. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: R
and Dell recommends to update/upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000190408
CVE ID: CVE-2021-21600 State: PUBLISHED Published: 2021-08-10T19:05:34.248476Z Last Updated: 2024-09-16T21:56:28.126Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: NetWorker Problem Types: CWE-772 Description: Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189694
CVE ID: CVE-2021-21601 State: PUBLISHED Published: 2021-08-10T19:05:37.917696Z Last Updated: 2024-09-17T03:02:46.784Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Data Protection Search Problem Types: CWE-532 Description: Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account. Additional A
he exposed credentials to access the vulnerable application with the privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189555
CVE ID: CVE-2021-21602 State: PUBLISHED Published: 2021-01-13T15:55:27 Last Updated: 2024-08-03T18:16:23.643Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1452
CVE ID: CVE-2021-21603 State: PUBLISHED Published: 2021-01-13T15:55:27 Last Updated: 2024-08-03T18:16:23.442Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1889
CVE ID: CVE-2021-21604 State: PUBLISHED Published: 2021-01-13T15:55:28 Last Updated: 2024-08-03T18:16:23.595Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1923
CVE ID: CVE-2021-21605 State: PUBLISHED Published: 2021-01-13T15:55:29 Last Updated: 2024-08-03T18:16:23.505Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2021
CVE ID: CVE-2021-21606 State: PUBLISHED Published: 2021-01-13T15:55:29 Last Updated: 2024-08-03T18:16:23.623Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023