CVE-2021-36318: 
Linux Gentoo vulnerability analysis and mitigation

Dell EMC Avamar versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain a plain-text password storage vulnerability identified as CVE-2021-36318. The vulnerability was disclosed in July 2021 and affects multiple Dell EMC products including Avamar Server, PowerProtect Data Protection Appliance (IDPA), and related systems running on SUSE Linux Enterprise (Dell Advisory).

The vulnerability is classified as a plain-text password storage vulnerability with a CVSS Base Score of 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The vulnerability requires high privileges for exploitation and has local access vector requirements (Dell Advisory).

If exploited, this vulnerability could lead to a complete outage of the affected system. The high privileged user could potentially exploit this vulnerability to gain unauthorized access to stored credentials and system information (Dell Advisory).

Dell has released security updates to address this vulnerability. Users are advised to upgrade to the latest versions: 18.2.x, 19.1.x, 19.2.x, 19.3.x, or 19.4.x with the OS rollup 2021-R2 or the latest OS rollup. Installation instructions are available in KB article 69982 for applying the hotfix (Dell Advisory).