nvd-json-data-feeds/CVE-2021/CVE-2021-215xx/CVE-2021-21546.json

{
  "id": "CVE-2021-21546",
  "sourceIdentifier": "security_alert@emc.com",
  "published": "2021-07-29T16:15:08.787",
  "lastModified": "2021-08-05T19:06:09.093",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability. A local low-privileged user of the Networker server could potentially exploit this vulnerability to read plain-text credentials from server log files."
    },
    {
      "lang": "es",
      "value": "Dell EMC NetWorker versiones 18.x,19.x anteriores a 19.3.0.4 y 19.4.0.0, contienen una vulnerabilidad de Divulgaci\u00f3n de Informaci\u00f3n en Archivos de Registro. Un usuario local poco privilegiado del servidor Networker podr\u00eda explotar potencialmente esta vulnerabilidad para leer credenciales en texto plano de los archivos de registro del servidor"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      },
      {
        "source": "security_alert@emc.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    },
    {
      "source": "security_alert@emc.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "19.1.1.0",
              "versionEndExcluding": "19.3.0.4",
              "matchCriteriaId": "59F3B6FF-1F58-4C4E-8268-D67DCCF6538D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dell:emc_networker:18.1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "17A93558-9719-44A4-A2F8-8F878F41ABEC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dell:emc_networker:18.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "975A54D6-D1FC-4F4A-984A-247659D2141D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dell:emc_networker:18.2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3744D101-DEED-4256-8755-938395AAE1A8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dell:emc_networker:19.4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "60AE0BA7-E6D5-45FB-B992-0EB7E6234B15"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000185470/dsa-2021-081-dell-emc-networker-security-update-for-a-clear-text-vulnerability",
      "source": "security_alert@emc.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}