CVE-2021-21594CWE-598

Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability

High · published August 16, 2021

CVSS v3.1
8.2
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclosure of sensitive data. Dell recommends upgrading at your earliest opportunity.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00806 · 56.4th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2021-08-16T22:00Z
EPSS history
Timeline
  • 16 AUG 22:00Z
    Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability
    cvelistv5