DSA-2021-138: Dell PowerFlex Security Update for a Cross-Site WebSocket Hijacking in WebUI/Presentation Server Vulnerability

Summary: Dell PowerFlex remediation is available for the Presentation Server that could be exploited by malicious users to compromise the affected system.

Bu makale şunlar için geçerlidir: Bu makale şunlar için geçerli değildir: Bu makale, belirli bir ürüne bağlı değildir. Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Diğer kaynaklara göz atın

Impact

Medium

Details

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21588 Dell PowerFlex versions 3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker may potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server which may lead to configuration changes. 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21588 Dell PowerFlex versions 3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker may potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server which may lead to configuration changes. 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Etkilenen Ürünler ve Düzeltme

Product Affected Versions Updated Version Link to Update
PowerFlex Presentation Server
 		  3.5.x 3.6 https://dl.dell.com/downloads/DL104415_PowerFlex-3.6-Build-355-Complete-Software-Download.zip
Product Affected Versions Updated Version Link to Update
PowerFlex Presentation Server
 		  3.5.x 3.6 https://dl.dell.com/downloads/DL104415_PowerFlex-3.6-Build-355-Complete-Software-Download.zip

Revision History

RevisionDateDescription
1.02021-07-01Initial Release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Yasal Uyarı

Etkilenen Ürünler

Product Security Information
Makale Özellikleri
Article Number: 000189265
Article Type: Dell Security Advisory
Son Değiştirme: 01 Tem 2021
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.