Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2021/02/09 10:15 p.m.•20 views

CVE-2020-26191

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISIPRIVJOBENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service...

7.8CVSS7.2AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•6 views

PT-2021-11219

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue allows a user with ISI PRIV JOB ENGINE to use the PermissionRepair job and grant themselves the highest level of RBAC privileges. This enables them to read arbitrar...

7.8CVSS0.00293EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•24 views

DELL EMC PowerScale 权限许可和访问控制问题漏洞

Dell EMC PowerScale OneFS is an API-powered file system. An elevation of privilege vulnerability exists in Dell EMC PowerScale OneFS 8.1.0 - 9.1.0. An attacker with the ISIPRIVJOBENGINE privilege could exploit this vulnerability by using a PermissionRepair job to grant themselves the highest leve...

7.8CVSS5.9AI score0.00293EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•11 views

CVE-2020-26191: Improper Privilege Management

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISIPRIVJOBENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service...

7.8CVSS5.8AI score0.00293EPSS
SaveExploits0References2
Rows per page
Query Builder