CVE-2021-36338 - Vulnerability Details

Vendors	Products
Dell	Powermax Os Solutions Enabler Solutions Enabler Virtual Appliance Unisphere 360 Unisphere For Powermax Unisphere For Powermax Virtual Appliance Vasa

Link	Providers
https://www.dell.com/support/kbdoc/000194640

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Unisphere for PowerMax", "vendor": "Dell", "versions": [{"lessThan": "9.2.2.2", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2021-12-19T00:00:00", "descriptions": [{"lang": "en", "value": "Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-602", "description": "CWE-602: Client-Side Enforcement of Server-Side Security", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-08-31T20:05:13", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.dell.com/support/kbdoc/000194640"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@dell.com", "DATE_PUBLIC": "2021-12-19", "ID": "CVE-2021-36338", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Unisphere for PowerMax", "version": {"version_data": [{"version_affected": "<", "version_value": "9.2.2.2"}]}}]}, "vendor_name": "Dell"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338."}]}, "impact": {"cvss": {"baseScore": 6.3, "baseSeverity": "Medium", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-602: Client-Side Enforcement of Server-Side Security"}]}]}, "references": {"reference_data": [{"name": "https://www.dell.com/support/kbdoc/000194640", "refsource": "MISC", "url": "https://www.dell.com/support/kbdoc/000194640"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T00:54:51.435Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.dell.com/support/kbdoc/000194640"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2021-36338", "datePublished": "2022-01-21T20:15:17.003707Z", "dateReserved": "2021-07-08T00:00:00", "dateUpdated": "2024-09-16T22:01:34.577Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Unisphere for PowerMax (string)

vendor : Dell (string)

versions : [ »

0 : { »

lessThan : 9.2.2.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

datePublic : 2021-12-19T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-602 (string)

description : CWE-602: Client-Side Enforcement of Server-Side Security (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-08-31T20:05:13 (string)

orgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

shortName : dell (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.dell.com/support/kbdoc/000194640 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secure@dell.com (string)

DATE_PUBLIC : 2021-12-19 (string)

ID : CVE-2021-36338 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Unisphere for PowerMax (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 9.2.2.2 (string)

}

]

}

]

}

vendor_name : Dell (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338. (string)

}

]

}

impact : { »

cvss : { »

baseScore : 6.3 (number)

baseSeverity : Medium (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-602: Client-Side Enforcement of Server-Side Security (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.dell.com/support/kbdoc/000194640 (string)

refsource : MISC (string)

url : https://www.dell.com/support/kbdoc/000194640 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T00:54:51.435Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.dell.com/support/kbdoc/000194640 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

assignerShortName : dell (string)

cveId : CVE-2021-36338 (string)

datePublished : 2022-01-21T20:15:17.003707Z (string)

dateReserved : 2021-07-08T00:00:00 (string)

dateUpdated : 2024-09-16T22:01:34.577Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:*", "matchCriteriaId": "515FA8C1-EBE4-4C95-A4F0-490A9253CBDC", "versionEndExcluding": "9.1.0.18", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:*", "matchCriteriaId": "0B69897E-9004-4C03-BE06-55587AEE5988", "versionEndExcluding": "9.2.3.0", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "019DA7BB-C234-430B-AC32-2E814E0891DF", "versionEndExcluding": "9.1.0.18", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "428D83E3-D8EC-4219-9B75-E9758EB00210", "versionEndExcluding": "9.2.3.0", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_360:*:*:*:*:*:*:*:*", "matchCriteriaId": "2EE42B7D-E49F-44F3-829E-BA72F1D42F7F", "versionEndExcluding": "9.1.0.29", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_360:*:*:*:*:*:*:*:*", "matchCriteriaId": "B164012E-60A3-48C6-BEB6-925A1F210BA1", "versionEndExcluding": "9.2.3.3", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*", "matchCriteriaId": "B34D944B-D1B6-4B10-9120-BBFC0CC244BA", "versionEndExcluding": "9.1.0.31", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1778817-3C6F-4448-A30E-2A63FC1113CA", "versionEndExcluding": "9.2.3.4", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "C672671E-0F6F-4501-8842-3BAB7A042DC5", "versionEndExcluding": "9.1.0.31", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "72F83DE8-B2E7-4E27-8863-4AB2FCA3ABA9", "versionEndExcluding": "9.2.3.4", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:vasa:*:*:*:*:*:*:*:*", "matchCriteriaId": "D50A0BBF-0D40-433E-92AD-E30768920733", "versionEndExcluding": "9.1.0.723", "vulnerable": true}, {"criteria": "cpe:2.3:a:dell:vasa:*:*:*:*:*:*:*:*", "matchCriteriaId": "620ABE76-5646-455C-93C8-F6009C4E668D", "versionEndExcluding": "9.2.3.0", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:powermax_os:5978:*:*:*:*:*:*:*", "matchCriteriaId": "43696C46-48E8-43E4-9387-77CE1B2BD401", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338."}, {"lang": "es", "value": "Las versiones de Unisphere for PowerMax anteriores a la 9.2.2.2 contienen una vulnerabilidad de escalada de privilegios. Un usuario malintencionado adyacente podr\u00eda explotar esta vulnerabilidad para escalar sus privilegios y acceder a funcionalidades a las que no tiene acceso. CVE-2022-31233 aborda la correcci\u00f3n parcial de CVE-2021-36338"}], "id": "CVE-2021-36338", "lastModified": "2024-11-21T06:13:32.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 5.2, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 5.1, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 4.2, "source": "security_alert@emc.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-01-21T21:15:08.487", "references": [{"source": "security_alert@emc.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/000194640"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/000194640"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-602"}], "source": "security_alert@emc.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-565"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 515FA8C1-EBE4-4C95-A4F0-490A9253CBDC (string)

versionEndExcluding : 9.1.0.18 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0B69897E-9004-4C03-BE06-55587AEE5988 (string)

versionEndExcluding : 9.2.3.0 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 019DA7BB-C234-430B-AC32-2E814E0891DF (string)

versionEndExcluding : 9.1.0.18 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 428D83E3-D8EC-4219-9B75-E9758EB00210 (string)

versionEndExcluding : 9.2.3.0 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:dell:unisphere_360:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2EE42B7D-E49F-44F3-829E-BA72F1D42F7F (string)

versionEndExcluding : 9.1.0.29 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:dell:unisphere_360:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B164012E-60A3-48C6-BEB6-925A1F210BA1 (string)

versionEndExcluding : 9.2.3.3 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B34D944B-D1B6-4B10-9120-BBFC0CC244BA (string)

versionEndExcluding : 9.1.0.31 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A1778817-3C6F-4448-A30E-2A63FC1113CA (string)

versionEndExcluding : 9.2.3.4 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C672671E-0F6F-4501-8842-3BAB7A042DC5 (string)

versionEndExcluding : 9.1.0.31 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 72F83DE8-B2E7-4E27-8863-4AB2FCA3ABA9 (string)

versionEndExcluding : 9.2.3.4 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:dell:vasa:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D50A0BBF-0D40-433E-92AD-E30768920733 (string)

versionEndExcluding : 9.1.0.723 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:dell:vasa:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 620ABE76-5646-455C-93C8-F6009C4E668D (string)

versionEndExcluding : 9.2.3.0 (string)

versionStartIncluding : 9.2.0.0 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:dell:powermax_os:5978:*:*:*:*:*:*:* (string)

matchCriteriaId : 43696C46-48E8-43E4-9387-77CE1B2BD401 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338. (string)

}

1 : { »

lang : es (string)

value : Las versiones de Unisphere for PowerMax anteriores a la 9.2.2.2 contienen una vulnerabilidad de escalada de privilegios. Un usuario malintencionado adyacente podría explotar esta vulnerabilidad para escalar sus privilegios y acceder a funcionalidades a las que no tiene acceso. CVE-2022-31233 aborda la corrección parcial de CVE-2021-36338 (string)

}

]

id : CVE-2021-36338 (string)

lastModified : 2024-11-21T06:13:32.963 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : ADJACENT_NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5.2 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:A/AC:L/Au:S/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 5.1 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.1 (number)

impactScore : 4.2 (number)

source : security_alert@emc.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.1 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-01-21T21:15:08.487 (string)

references : [ »

0 : { »

source : security_alert@emc.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.dell.com/support/kbdoc/000194640 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.dell.com/support/kbdoc/000194640 (string)

}

]

sourceIdentifier : security_alert@emc.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-602 (string)

}

]

source : security_alert@emc.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-565 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Adjacent Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Adjacent Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object