CVE-2021-36302: Privilege Escalation in Dell EMC Azure Stack Hub

The impact of CVE-2021-36302 is severe. An attacker who can obtain standard JEA credentials can leverage this vulnerability to escalate their privileges to a highly privileged account, effectively compromising the entire Azure Stack Hub system. This could lead to unauthorized access to sensitive data, modification of system configurations, deployment of malicious software, and disruption of services. The potential for lateral movement within the Azure Stack Hub environment is significant, as a compromised account can be used to access other resources and systems. The blast radius extends to all data and services hosted on the affected Azure Stack Hub instance.

1. Reserved2021-07-08
2. Published2022-02-09
3. Modified2024-09-16
4. EPSS updated2026-04-02

The primary mitigation for CVE-2021-36302 is to upgrade to Dell EMC Integrated System for Microsoft Azure Stack Hub version 2204 or later, which contains the fix. If an immediate upgrade is not feasible, consider restricting JEA access to only authorized personnel and implementing multi-factor authentication (MFA) for JEA accounts. Regularly review JEA policies and audit logs for suspicious activity. Implement network segmentation to limit the potential impact of a compromised account. After upgrade, confirm successful remediation by verifying that the JEA configuration is secure and that no unauthorized privilege escalation attempts are detected in the audit logs.