CVE-2021-36338
First published: Fri Jan 21 2022(Updated: )
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Solutions Enabler | <9.1.0.18 | |
| Dell Solutions Enabler | >=9.2.0.0<9.2.3.0 | |
| Dell Solutions Enabler Virtual Appliance | <9.1.0.18 | |
| Dell Solutions Enabler Virtual Appliance | >=9.2.0.0<9.2.3.0 | |
| Dell Unisphere 360 | <9.1.0.29 | |
| Dell Unisphere 360 | >=9.2.0.0<9.2.3.3 | |
| Dell Unisphere for PowerMax | <9.1.0.31 | |
| Dell Unisphere for PowerMax | >=9.2.0.0<9.2.3.4 | |
| Dell Unisphere For Powermax Virtual Appliance | <9.1.0.31 | |
| Dell Unisphere For Powermax Virtual Appliance | >=9.2.0.0<9.2.3.4 | |
| Dell Vasa | <9.1.0.723 | |
| Dell Vasa | >=9.2.0.0<9.2.3.0 | |
| Dell Powermax Os | =5978 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-36338?
CVE-2021-36338 is a privilege escalation vulnerability in Unisphere for PowerMax versions prior to 9.2.2.2.
How does CVE-2021-36338 affect Dell Solutions Enabler?
Dell Solutions Enabler versions up to 9.1.0.18 are affected by CVE-2021-36338.
What versions of Dell Unisphere 360 are affected by CVE-2021-36338?
Dell Unisphere 360 versions up to 9.1.0.29 are affected by CVE-2021-36338.
How can I fix CVE-2021-36338?
To fix CVE-2021-36338, upgrade to Unisphere for PowerMax version 9.2.2.2 or higher.
What is the severity of CVE-2021-36338?
CVE-2021-36338 has a severity level of high.
- collector/nvd-index
- agent/event
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell solutions enabler
- version/dell solutions enabler/9.2.0.0
- canonical/dell solutions enabler virtual appliance
- version/dell solutions enabler virtual appliance/9.2.0.0
- canonical/dell unisphere 360
- version/dell unisphere 360/9.2.0.0
- canonical/dell unisphere for powermax
- version/dell unisphere for powermax/9.2.0.0
- canonical/dell unisphere for powermax virtual appliance
- version/dell unisphere for powermax virtual appliance/9.2.0.0
- canonical/dell vasa
- version/dell vasa/9.2.0.0
- canonical/dell powermax os
- version/dell powermax os/5978