CVE-2021-21544

Dell iDRAC9 prior to 4.40.00.00 contains an improper authentication vulnerability (CVE-2021-21544). A remote authenticated attacker with high privileges could manipulate the username field in the comments section to impersonate another user. Impact is limited to authentication state and user iden...

CVE-2021-21544

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user...

Dell iDRAC Multiple Vulnerabilities (DSA-2021-073)

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple vulnerabilities: - A Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker may potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is...