VULNERABILITY INTELLIGENCE

CVE-2021-21531

CVSS score8.1 HIGH
EPSS probability0.69%
CISA KEVNot currently listed
Published2021-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Description

Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.

Weakness classification

  • CWE-602: Client-Side Enforcement of Server-Side Security
  • CWE-669: Incorrect Resource Transfer Between Spheres

Primary references