CVE-2021-21564
Assigner: dell
Published: 2021-07-19T00:00:00
State: PUBLISHED
affected: product: Dell OpenManage Enterprise
vendor: Dell
versions: lessThan: Open Manage Enterprise 3.6.1
status: affected
version: unspecified
versionType: custom
datePublic: 2021-07-19T00:00:00
descriptions: value: Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-200
description: CWE-200: Information Exposure
type: CWE