CVE-2021-21549

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable...

CVE-2021-21549

The CVE concerns Dell EMC XtremIO XMS (XtremIO management software) with a Cross-Site Request Forgery vulnerability. Multiple connected sources confirm a CSRF flaw that can trick a victim application user into issuing state-changing requests to the vulnerable XMS, potentially causing unintended s...