Information Exposure Vulnerability in Dell Hybrid Client
CVE-2021-21536

6.2MEDIUM

Key Information:

Vendor

Dell
Status
Dell Hybrid Client (dhc)
Vendor
CVE Published:
30 April 2021

What is CVE-2021-21536?

Dell Hybrid Client prior to version 1.5 is susceptible to an information exposure vulnerability, which allows a local unauthenticated attacker to register the client to a server. This could enable the attacker to access and view sensitive information stored on the client, posing a significant risk to data integrity and confidentiality.

Affected Version(s)

Dell Hybrid Client (DHC) < 1.5

References

https://www.dell.com/support/kbdoc/en-us/000184667/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.