CVE-2021-21559

State
Published
Severity
7.1 High
Published
Jun 8, 2021
Updated
Sep 17, 2024
Reserved
Jan 4, 2021

Read the record on cve.org

Description

Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (NetWorker Management Console) components which uses SSL encrypted connection in order to communicate with the application server. An unauthenticated attacker in the same network collision domain as the NetWorker Management Console client could potentially exploit this vulnerability to perform man-in-the-middle attacks to intercept and tamper the traffic between the client and the application server.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hdell

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
NetWorkerDell
  • before 19.4.0.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.