CVE-2021-21512

HIGH

Dell EMC PowerProtect Cyber Recovery 19.7.0.1 - Authenticated Information Disclosure via Email Account Takeover

Title source: llm
STIX 2.1

Description

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account.

References (1)

Core 1

Scores

CVSS v3 7.9
EPSS 0.0005
EPSS Percentile 16.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Details

CWE
CWE-200
Status published
Products (1)
dell/emc_powerprotect_cyber_recovery 19.7.0.1
Published Feb 19, 2021
Tracked Since Feb 18, 2026