8.1
High
CVE-2021-36330 Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability
Description
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell EMC Streaming Data Platform 1.3 | earliest → < 1.3 | 1.3 |
Other CVEs of Dell EMC Streaming Data Platform
The 5 CVEs of Dell EMC Streaming Data Platform →
CVE-2021-36329
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability
6.5
Medium
CVE-2021-36328
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability
8.8
High
CVE-2021-36327
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability
5.3
Medium
CVE-2021-36326
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI)
6.5
Medium