DELL EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to insufficient logging. An attacker could exploit this vulnerability to make unaudited and untraceable configuration changes to settings that their role is authorized to change...

CVE-2021-36282: Use of Uninitialized Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

CVE-2021-21592: Improper Handling of Exceptional Conditions

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...

PT-2021-14642

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.1.x Description The issue is an OS command injection vulnerability that may allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to escalate privileges and escape...

CVE-2021-21594: Use of GET Request Method With Sensitive Query Strings

Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclosure of sensitive data. Dell recommends upgrading at your earliest opportunity...

Dell Technologies Dell PowerScale OneFS安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.1.0. of Dell EMC PowerScale OneFS is vulnerable to the use of uninitialized resources. No details of the vulnerability are currently available...

DELL EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. an information disclosure vulnerability exists in Dell EMC PowerScale OneFS versions 8.2.-9.2.. The vulnerability stems from improper handling of exception conditions. An attacker could use the vulnerability to obtain information out of...

EMC PowerScale操作系统命令注入漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...

CVE-2021-36278: Insertion of Sensitive Information into Log File

Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in log files. A local malicious user with ISIPRIVLOGINSSH, ISIPRIVLOGINCONSOLE, or ISIPRIVSYSSUPPORT privileges may exploit this vulnerability to access sensitive information. If...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell EMC PowerScale OneFS, an API-driven file system, is vulnerable to an information disclosure in Dell EMC PowerScale OneFS version 8.2.2-9.1.0.. The vulnerability stems from the product's use of a get request method with a sensitive query string. An attacker could exploit the vulnerability to...

DELL EMC PowerScale 命令注入漏洞

Dell EMC PowerScale OneFS is an API-driven file system. security vulnerability exists in Dell EMC PowerScale OneFS version 8.2.-9.1.1.. An attacker could exploit the vulnerability to elevate privileges...

EMC PowerScale安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect privilege assignment. An attacker could exploit this vulnerability to elevate privileges...

PT-2021-21199

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment, which can be exploited by a low-privileged authenticated user to escalate privileges. Recommendations For Dell EMC...

PT-2021-14636

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to improper handling of an exceptional condition, which could be exploited by a remote low privileged user, potentially leading to unauthorized information...

PT-2021-21200

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.1.0.x Description The issue is related to a use of uninitialized resource, which can potentially allow an authenticated user with ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to gai...

EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-powered file system. A vulnerability exists in Dell EMC PowerScale OneFS versions 8.2. - 9.2. in which critical resource permissions are incorrectly assigned. An attacker could exploit this vulnerability to gain unauthorized access to cluster-related informatio...

CVE-2021-36279: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

PT-2021-21196

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...

Dell EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect critical resource privilege assignment. An attacker could use this vulnerability to gain unauthorized access to cluster-related information...

PT-2021-21198

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...