CVE-2021-36338

State
Published
Severity
6.3 Medium
Published
Jan 21, 2022
Updated
Sep 16, 2024
Reserved
Jul 8, 2021

Read the record on cve.org

Description

Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.

Scores

CVSSScoreVectorSource
3.16.3 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Ndell

Weaknesses

  • CWE-602 Client-Side Enforcement of Server-Side Security

Affected Products

ProductVersions
Unisphere for PowerMaxDell
  • before 9.2.2.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.