Design/Logic Flaw

2021-07-2800:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols.

CPENameOperatorVersion
emc_isilon_onefsge8.1.0
emc_powerscale_onefseq9.0.0

CPE	Name	Operator	Version
	emc_isilon_onefs	ge	8.1.0
	emc_powerscale_onefs	eq	9.0.0

References

www.dell.com/support/security/en-us/details/546591/DSA-2020-225-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-OneFS-Security-Update-for-remotesuppor