Information Disclosure Vulnerability in Dell EMC PowerProtect Cyber Recovery
CVE-2021-21512

7.9HIGH

Key Information:

Vendor

Dell
Status
Cyber Recovery
Vendor
CVE Published:
19 February 2021

What is CVE-2021-21512?

Dell EMC PowerProtect Cyber Recovery version 19.7.0.1 is affected by an information disclosure vulnerability that can be exploited by a locally authenticated user with high privileges. This flaw may allow the user to gain unauthorized access to the notification email account, potentially leading to account takeover and exposure of sensitive information.

Affected Version(s)

Cyber Recovery < 19.7.0.2

References

https://www.dell.com/support/kbdoc/en-us/000183169/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.