CVE-2021-36317: Medium severity emc avamar server virtual edition vulnerability
Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-36317?
CVE-2021-36317 is a plain-text password storage vulnerability in Dell EMC Avamar Server version 19.4 and Dell EMC Powerprotect Data Protection Appliance version 2.7.
Who is affected by CVE-2021-36317?
Users of Dell EMC Avamar Server version 19.4 and Dell EMC Powerprotect Data Protection Appliance version 2.7 are affected by CVE-2021-36317.
What is the severity of CVE-2021-36317?
CVE-2021-36317 has a severity score of 6.7, which is considered medium.
How can a local attacker exploit CVE-2021-36317?
A local attacker could exploit CVE-2021-36317 to gain access to certain user credentials stored in plain text.
Are there any references for CVE-2021-36317?
Yes, you can find more information about CVE-2021-36317 at the following references: [https://security.gentoo.org/glsa/202210-09](https://security.gentoo.org/glsa/202210-09) and [https://www.dell.com/support/kbdoc/000193369](https://www.dell.com/support/kbdoc/000193369).