Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-21588 EUVD-2021-8860GHSA-592w-856w-97c3

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated atta…

Published Jul 12, 2021 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Affected products

VendorProductAffectedFixed
Dell PowerFlex 3.5.x —

References