← CVE Intelligence

CVE-2021-21588

Dell / PowerFlex PUBLISHED

Description (CNA)

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Affected (CNA)

Vendor / productVersions
Dell / PowerFlexaffected 3.5.x

CWE

CWE-345

References

ADP enrichment

CVE

No English description supplied.