EUVD-2021-22948

Malware in sbrugna...

Unspecified Vulnerability in Dell Emc Streaming Data Platform

Dell Emc Streaming Data Platform is a Dell platform for ingesting, storing and analyzing continuous streaming data in real time. A security vulnerability exists in the Dell Emc Streaming Data Platform that originates from the inclusion of an indirect object reference, which can be exploited by an...

PT-2021-21229

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially exploit it and perform port scanning of internal networks. It also enables the attacker to make HTTP requests ...

CVE-2021-36326: Selection of Less-Secure Algorithm During Negotiation

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

PT-2021-21231

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote malicious user to potentially exploit it and gain sensitive information due to an Indirect Object Reference Vulnerability. Recommendations For version...

PT-2021-21230

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote malicious user to potentially execute SQL commands, performing unauthorized actions and retrieving sensitive information from the database...

CVE-2021-36327: Server-Side Request Forgery (SSRF)

Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choi...

PT-2021-21228

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially exploit an SSL Strip Vulnerability in the User Interface UI, leading to a downgrade in the communications...

CVE-2021-36329: Authorization Bypass Through User-Controlled Key

Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...

CVE-2021-36330: Insufficient Session Expiration

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

CVE-2021-36328: Use of GET Request Method With Sensitive Query Strings

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database...

PT-2021-21233

Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially reuse old session artifacts and impersonate a legitimate user due to insufficient session expiration...