Authentication flaw

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

CVE-2021-21526

Dell PowerScale OneFS 8.1.0–9.1.0 contains an OS command injection vulnerability in SmartLock compliance mode that may let a compadmin execute arbitrary commands as root. This is documented across multiple sources (CVE-2021-21526, CNVD-2021-39552). Affected products are PowerScale OneFS operating...

CVE-2021-21526

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root...

CVE-2020-26197

Dell PowerScale OneFS (versions 8.1.0–9.1.0) contains an LDAP Provider TLSv1.2 connectivity issue that can allow eavesdropping/decryption of LDAP traffic when the LDAP server is used for authentication. Root cause: LDAP over TLSv1.2 is not properly supported, enabling potential exposure of confid...

CVE-2020-26197

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

PT-2021-11225 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue is related to the LDAP Provider's inability to connect over TLSv1.2, which may make it easier for a malicious actor to eavesdrop and decrypt traffic. This issue does no...

CVE-2020-26197: Inadequate Encryption Strength

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

Dell Technologies Dell PowerScale OneFS 加密问题漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An encryption issue vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0, which stems from a vulnerability...

Dell Technologies Dell PowerScale OneFS 操作系统命令注入漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An operating system command injection vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0 that allows...

CVE-2021-21526: Improper Neutralization of Special Elements used in an OS Command

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root...

CVE-2021-21506

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

Input validation

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

Input validation

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

CVE-2021-21506

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

CVE-2021-21506

CVE-2021-21506 affects Dell PowerScale OneFS 8.1.2, 8.2.2 and 9.1.0. The issue is described as an improper input sanitization in the API handler. Exploitation requires an unauthenticated user with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges, potentially enabling privileges escalation....

CVE-2021-21503

CVE-2021-21503 affects Dell PowerScale OneFS 8.1.2, 8.2.2 and 9.1.0. An improper input sanitization issue in a command could allow the Compadmin user to escalate privileges locally. The vulnerability is tied to a command-injection-style flaw and is described across multiple connected sources (NVD...

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

Dell PowerScale OneFS 操作系统命令注入漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling NAS. An operating system command injection vulnerability exists in PowerScale OneFS 8.1.2,8.2.2 and 9.1.0, which could be exploited by an...