DSA-2021-138: Dell PowerFlex Security Update for a Cross-Site WebSocket Hijacking in WebUI/Presentation Server Vulnerability
Summary: Dell PowerFlex remediation is available for the Presentation Server that could be exploited by malicious users to compromise the affected system.
Bu makale şunlar için geçerlidir:
Bu makale şunlar için geçerli değildir:
Bu makale, belirli bir ürüne bağlı değildir.
Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Impact
Medium
Details
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21588 | Dell PowerFlex versions 3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker may potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server which may lead to configuration changes. | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21588 | Dell PowerFlex versions 3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker may potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server which may lead to configuration changes. | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Etkilenen Ürünler ve Düzeltme
| Product | Affected Versions | Updated Version | Link to Update |
| PowerFlex Presentation Server |
3.5.x | 3.6 | https://dl.dell.com/downloads/DL104415_PowerFlex-3.6-Build-355-Complete-Software-Download.zip |
| Product | Affected Versions | Updated Version | Link to Update |
| PowerFlex Presentation Server |
3.5.x | 3.6 | https://dl.dell.com/downloads/DL104415_PowerFlex-3.6-Build-355-Complete-Software-Download.zip |
Revision History
| Revision | Date | Description |
| 1.0 | 2021-07-01 | Initial Release |
Related Information
Yasal Uyarı
Etkilenen Ürünler
Product Security InformationMakale Özellikleri
Article Number: 000189265
Article Type: Dell Security Advisory
Son Değiştirme: 01 Tem 2021
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.