CVE-2021-21601

HIGH

Dell EMC Data Protection Search < 19.5 and IDPA < 2.7 - Information Exposure in Log File

Title source: llm
STIX 2.1

Description

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://www.dell.com/support/kbdoc/000189555

Scores

CVSS v3 8.8
EPSS 0.0024
EPSS Percentile 14.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-532
Status published
Products (2)
dell/emc_data_protection_search < 19.5
dell/emc_integrated_data_protection_appliance < 2.7
Published Aug 10, 2021
Tracked Since Feb 18, 2026