CVE-2021-36318 Hardcoded credentials in Avamar
A high-privileged user can exploit plain-text password storage in Dell EMC Avamar to cause a complete service outage.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-36318?
CVE-2021-36318 is a medium-severity vulnerability in Dell Avamar, published on 21 Dec 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.
Which versions are affected by CVE-2021-36318?
It affects 1 product.
Products include Dell Emc Avamar Server.
How do I fix CVE-2021-36318?
No fix has been published for CVE-2021-36318 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-36318 being exploited?
There is no known exploitation of CVE-2021-36318 in the wild and no public exploit code.
Other vulnerabilities in Dell Avamar
Sources
Also known as GHSA-r96m-rq4f-96v2.