Dell EMC OpenManage Enterprise and OpenManage Enterprise-Modular Input Validation Error Vulnerability

DELL EMC OpenManage Enterprise and DELL EMC OpenManage Enterprise-Modular are both products of Dell DELL, U.S.A. DELL EMC OpenManage Enterprise is an intuitive infrastructure management console. OpenManage Enterprise is a system management and monitoring application that provides a comprehensive...

Dell OpenManage Enterprise Operating System Command Injection Vulnerability (CNVD-2021-92459)

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An operating system command injection...

DELL EMC OpenManage Enterprise-Modular OS Command Injection Vulnerability

An operating system command injection vulnerability exists in Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00. A remote attacker could exploit this vulnerability to execute arbitrary Shell commands on the affected system...

DELL EMC OpenManage Enterprise Injection Vulnerability

DELL EMC OpenManage Enterprise is an intuitive infrastructure management console.OpenManage Enterprise is a system management and monitoring application that provides a comprehensive view of Dell EMC servers, chassis, storage devices, and network switches on an enterprise network.DELL EMC...

PT-2021-14615

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to insufficient logging, allowing an authenticated user with ISI PRIV LOGIN PAPI privileges to make configuration changes without being audited or tracked...

PT-2021-21196

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...

PT-2021-14638

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.1.1.x Description The issue is related to an improper neutralization of special elements used in an OS command, which could allow the compadmin user to elevate privileges. This affects Smartlo...

PT-2021-21200

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.1.0.x Description The issue is related to a use of uninitialized resource, which can potentially allow an authenticated user with ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to gai...

PT-2021-21199

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment, which can be exploited by a low-privileged authenticated user to escalate privileges. Recommendations For Dell EMC...

CVE-2021-36282: Use of Uninitialized Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

CVE-2021-36279: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

CVE-2021-36280: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

CVE-2021-36278: Insertion of Sensitive Information into Log File

Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in log files. A local malicious user with ISIPRIVLOGINSSH, ISIPRIVLOGINCONSOLE, or ISIPRIVSYSSUPPORT privileges may exploit this vulnerability to access sensitive information. If...

CVE-2021-21595: Improper Neutralization of Special Elements used in a Command

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell...

Dell EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect critical resource privilege assignment. An attacker could use this vulnerability to gain unauthorized access to cluster-related information...

DELL EMC PowerScale 命令注入漏洞

Dell EMC PowerScale OneFS is an API-driven file system. security vulnerability exists in Dell EMC PowerScale OneFS version 8.2.-9.1.1.. An attacker could exploit the vulnerability to elevate privileges...

CVE-2021-21592: Improper Handling of Exceptional Conditions

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...

CVE-2021-21599: Improper Neutralization of Special Elements used in an OS Command

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to escalate privileges and escape the compliance guarantees. This only impacts Smartlock WORM compliance mode clusters as a critical...

Vulnerability fixed in Dell EMC NetWorker

A vulnerability has been fixed in Dell EMC NetWorker. A authenticated malicious party could potentially exploit it to cause a Denial-of-Service through a rogue API request. Dell EMC has released updates to fix the vulnerability. For more information, see:...

CVE-2021-21601

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be ab...