CVE-2021-36750 - CVE House
Back to Database
Status published High CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation,...

Vulnerability Description

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-36750

Credits & Attribution

No credits recorded in the NVD database.

References

More from zendesk

View All →
CVE-2018-20857
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack...
High 7.5
CVE-2015-6921
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module...
Low 2.6

Affected Vendor

Affected Software

enc datavault, enc vaultapi, secureaccess
Vulnerable Versions:
0, 3.02

Timeline

Official Publish: December 22nd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.