← Database

CVE-2021-36294

CRITICAL CVSS: 9.8 Published: 2022-01-25 Modified: 2026-06-17

Description

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user.

Affected Platforms

Dell Vnx5800Dell Vnx5600Dell Vnx8000Dell Emc Unity Operating EnvironmentDell Vnx Vg10Dell Vnx5400Dell Vnx5200Dell Vnx Vg50Dell Vnx7600

Weakness Type

CWE-331, CWE-330

References