CVE-2021-21588

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

CVE-2021-21588: Insufficient Verification of Data Authenticity

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

PT-2021-14632

Name of the Vulnerable Software and Affected Versions Dell EMC PowerFlex versions 3.5.x Description The issue concerns a Cross-Site WebSocket Hijacking vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could exploit this by tricking a user into performing unwanted action...