CVE-2021-36311
Assigner: dell
Published: 2021-10-11T00:00:00
State: PUBLISHED
affected: product: NetWorker
vendor: Dell
versions: lessThan: 19.5
status: affected
version: unspecified
versionType: custom
datePublic: 2021-10-11T00:00:00
descriptions: value: Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-285
description: CWE-285: Improper Authorization
type: CWE