CVE-2022-24411

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

Privilege escalation

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

CVE-2022-24411

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

CVE-2022-24411: Creation of Temporary File With Insecure Permissions

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

CVE-2022-23159: Missing Release of Memory after Effective Lifetime

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

CVE-2021-21561: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicious user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE privileges to gain access to sensitive information in the log files...

Code injection

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

Design/Logic Flaw

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

CVE-2021-36282

Dell EMC PowerScale OneFS (versions 8.2.x–9.1.0.x) is affected by a use of uninitialized resource vulnerability. The issue could allow an authenticated user with ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH privileges to read up to 24 bytes of data from the /ifs kernel stack under certain conditi...

CVE-2021-36279: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

CVE-2021-36282: Use of Uninitialized Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

CVE-2021-36280: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

Dell PowerScale OneFS Access Control Error Vulnerability

Dell PowerScale OneFS is an operating system from Dell, Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has an access control error vulnerability in 9.1.0.x. The vulnerability stems from a network system or product that does not properly...

CVE-2021-21567

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege...

Privilege escalation

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege...

CVE-2021-21567: Incorrect Permission Assignment for Critical Resource

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege...

CVE-2021-21562

Dell EMC PowerScale OneFS is affected by CVE-2021-21562, described as an untrusted search path vulnerability that could let a user with specific privileges cause execution of resources outside the application’s control. The vulnerability affects OneFS and is associated with local access, with par...

CVE-2021-21562: Untrusted Search Path

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE and ISIPRIVSYSUPGRADE or ISIPRIVAUDIT to provide an untrusted path which can lead to run resources that are not under the application’s direct...

CVE-2021-21550: Improper Neutralization of Special Elements used in an OS Command

Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges to escalate privileges...

CVE-2021-21527: Improper Neutralization of Special Elements used in an OS Command

Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges to escalate privileges...