CVE-2021-36294 — Dell / VNX Control Station

CVE-2021-36294

Dell / VNX Control Station PUBLISHED

Description (CNA)

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user.

Affected (CNA)

Vendor / product	Versions
Dell / VNX Control Station	affected unspecified before TBD

CWE

CWE-331

References

https://www.dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities