PT-2021-14606
CVE-2021-21558
·
Published
2021-06-08
·
Updated
2021-06-16
Description by
CVSS 3.1
8.2
HighMetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Dell EMC NetWorker versions 18.x through 19.4.0.1
Description
The issue allows a local administrator of the gstd system to potentially read LDAP credentials from local logs. These stolen credentials can then be used to make changes to the network domain.
Recommendations
For versions 18.x through 19.4.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾