CVE-2021-36318: Medium severity emc avamar server virtual edition vulnerability

Published Dec 21, 2021

Updated

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.

Affected Software

5 affected components

Dell EMC Avamar Server=18.2

Dell EMC Avamar Server=19.1

Dell EMC Avamar Server=19.2

Dell EMC Avamar Server=19.3

Dell EMC Avamar Server=19.4

Remediation

Patch Available

https://www.dell.com/support/kbdoc/000193369

Event History

Dec 21, 2021

CVE Published

via MITRE·05:05 PM

Data Sourced

via MITRE·05:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-36318?

CVE-2021-36318 is a vulnerability in Dell EMC Avamar versions 18.2, 19.1, 19.2, 19.3, and 19.4 that allows a high privileged user to exploit a plain-text password storage vulnerability, potentially leading to a complete outage.

How severe is CVE-2021-36318?

CVE-2021-36318 has a severity rating of 6.7, which is considered medium.

Which Dell EMC Avamar versions are affected by CVE-2021-36318?

Dell EMC Avamar versions 18.2, 19.1, 19.2, 19.3, and 19.4 are affected by CVE-2021-36318.

What is the risk of CVE-2021-36318?

CVE-2021-36318 poses a risk of a complete outage as a high privileged user could potentially exploit the plain-text password storage vulnerability.

How can I fix CVE-2021-36318?

To fix CVE-2021-36318, users should apply the patches or updates provided by Dell EMC for the affected versions of Avamar.