CVE-2021-21534CWE-200
Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability
Medium · published April 30, 2021
What it is
Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive information via the local API.
The record
Technical detail
- CVSS v3.1
- 4.0 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00226 · 12.5th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2021-04-30T17:40Z
EPSS history
Timeline