CVE-2021-21584: Infoleak

Published Aug 9, 2021

Updated

Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially exploit this vulnerability leading to disclosure of the OIDC server credentials.

Affected Software

2 affected components

Dell OpenManage Enterprise=3.5

Dell OpenManage Enterprise-Modular=1.30.00

Remediation

Patch Available

https://www.dell.com/support/kbdoc/000189673

Event History

Aug 9, 2021

CVE Published

via MITRE·09:05 PM

Data Sourced

via MITRE·09:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-21584?

CVE-2021-21584 is classified as an information disclosure vulnerability.

How do I fix CVE-2021-21584?

To fix CVE-2021-21584, update to the latest version of Dell OpenManage Enterprise or OpenManage Enterprise-Modular that addresses this vulnerability.

Who is affected by CVE-2021-21584?

CVE-2021-21584 affects users of Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00.

What kind of attack can be performed using CVE-2021-21584?

An authenticated low privileged attacker may exploit CVE-2021-21584 to disclose OIDC server credentials.

Is CVE-2021-21584 being actively exploited?

While it is not confirmed if CVE-2021-21584 is actively exploited, it poses a risk due to potential unauthorized information disclosure.