CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2021-11-30

Last modified

2024-09-16

Weaknesses

CWE-613

Affected products

• Dell Emc Streaming Data Platform (Dell)
• Emc Streaming Data Platform (Dell)

References

• https://www.dell.com/support/kbdoc/en-in/000193697/dsa-2021-205-dell-emc-streaming-data-platform-security-update-for-th…