CVE-2021-36317

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-256 CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Dec 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-363186.7Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentia CVE-2021-363193.3Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated CVE-2021-36327.5A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already r CVE-2021-363209.8Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacke CVE-2021-363217.5Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated att CVE-2021-363226.1Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker CVE-2021-363236.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2021-363246.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2021-363256.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2021-363266.5Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthentica CVE-2021-363275.3Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker CVE-2021-363288.8Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit