CVE-2024-4712 Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the image-handler process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can lead ...

CVE-2024-3037 Arbitrary File Deletion in PaperCut NG/MF Web Print

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

PT-2022-16679

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.2 and above Description A local attacker with ISI PRIV LOGIN SSH and/or ISI PRIV LOGIN CONSOLE could potentially exploit this issue, leading to elevation of privilege. This could potentially allow users to...

PT-2022-15887

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.2 through 9.3.0.x Description The issue is related to a missing release of memory after its effective lifetime, which can be exploited by an authenticated user with specific privileges, such as ISI PRIV LOGIN...

PT-2021-14609

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS version 8.1.2 Description The issue allows a malicious user with ISI PRIV LOGIN SSH and/or ISI PRIV LOGIN CONSOLE privileges to gain access to sensitive information in the log files. This is a sensitive information exposu...

PT-2021-14642

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.1.x Description The issue is an OS command injection vulnerability that may allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to escalate privileges and escape...

PT-2021-21196

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...

PT-2021-21200

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.1.0.x Description The issue is related to a use of uninitialized resource, which can potentially allow an authenticated user with ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to gai...

PT-2021-21198

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...

PT-2021-14614

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS version 9.1.0.x Description The issue is related to improper privilege management, which may allow an authenticated user with ISI PRIV LOGIN SSH and/or ISI PRIV LOGIN CONSOLE privileges to elevate their privilege...

PT-2021-14610

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS affected versions not specified Description The issue allows a user with specific privileges, including ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE and ISI PRIV SYS UPGRADE or ISI PRIV AUDIT, to provide an untrusted...

PT-2021-14577

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.1.0 through 9.1.0 Description The issue is related to an improper neutralization of special elements used in an OS command, which may allow an authenticated user with specific privileges to escalate privileges...

PT-2021-11222

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 Description: The issue is related to an Incorrect Permission Assignment for a Critical Resource, which may allow a non-admin user with either ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH...

PT-2021-11220

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.2.0 through 9.1.0 Description: The issue allows a non-admin user with either ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to potentially exploit it and read arbitrary data, tamper with system...

DELL EMC PowerScale: Vulnerabilities related to permission licensing and access control

Dell EMC PowerScale OneFS is an API-powered file system. Dell EMC PowerScale OneFS 8.1.2, 8.2.2 is vulnerable to privilege permission and access control issues. An attacker with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges could exploit this vulnerability to corrupt cryptographic operations...

CVE-2020-26181

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if...

Privilege escalation

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if...