medium6.3
CVE-2021-36338
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability.
Impact
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Solutions Enabler | before 9.1.0.18 from 9.2.0.0 before 9.2.3.0 |
| Dell | Solutions Enabler Virtual Appliance | before 9.1.0.18 from 9.2.0.0 before 9.2.3.0 |
| Dell | Unisphere 360 | before 9.1.0.29 from 9.2.0.0 before 9.2.3.3 |
| Dell | Unisphere For Powermax | before 9.1.0.31 from 9.2.0.0 before 9.2.3.4 |
| Dell | Unisphere For Powermax Virtual Appliance | before 9.1.0.31 from 9.2.0.0 before 9.2.3.4 |
| Dell | Vasa | before 9.1.0.723 from 9.2.0.0 before 9.2.3.0 |
| Dell | Powermax Os | Version 5978 |