Security Advisory

CVE-2021-21549

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-21 20:05:11
Last updated 2024-09-16 18:08:03
Assigner dell
State PUBLISHED

Description

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.