Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2021-21547 Details

Description

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.dell.com/support/kbdoc/000185484 CVEPatchVendor Advisory
https://www.dell.com/support/kbdoc/000185484 [email protected]PatchVendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-312Cleartext Storage of Sensitive Information[email protected]

Affected Products

ProductVersions
dell unity operating environment
< 5.0.7.0.5.008

CPE

  • cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
dell unity xt operating environment
< 5.0.7.0.5.008

CPE

  • cpe:2.3:a:dell:unity_xt_operating_environment:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
dell unityvsa operating environment
< 5.0.7.0.5.008

CPE

  • cpe:2.3:a:dell:unityvsa_operating_environment:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2021-21547
NVD Published Date:
Apr 30, 2021
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2021-21547 Details - Not Deferred