CVE-2020-26193: Improper Input Validation

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISIPRIVCLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

CVE-2020-26191: Improper Privilege Management

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISIPRIVJOBENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service...

CVE-2020-26196: Incorrect Permission Assignment for Critical Resource

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location...

PT-2021-11221

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue is related to improper input validation, allowing a user with the ISI PRIV CLUSTER privilege to execute arbitrary OS commands on the application's underlying OS wit...

DELL EMC PowerScale 安全漏洞

Dell EMC PowerScale OneFS is an API-powered file system. A backup/restore privilege improperly implemented vulnerability exists in Dell EMC PowerScale OneFS 8.1.0-9.1.0. An attacker with the BackupAdmin role could exploit this vulnerability to write data outside of the expected file system...

DELL EMC PowerScale 权限许可和访问控制问题漏洞

Dell EMC PowerScale OneFS is an API-powered file system. An elevation of privilege vulnerability exists in Dell EMC PowerScale OneFS 8.1.0 - 9.1.0. An attacker with the ISIPRIVJOBENGINE privilege could exploit this vulnerability by using a PermissionRepair job to grant themselves the highest leve...

PT-2021-11219

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue allows a user with ISI PRIV JOB ENGINE to use the PermissionRepair job and grant themselves the highest level of RBAC privileges. This enables them to read arbitrar...

PT-2021-11223 · Dell Emc · Dell Emc Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.2 through 9.1.0 Description: The issue in Dell EMC PowerScale OneFS allows a remote unauthenticated attacker to potentially slow down the system by exploiting the OneFS SMB directory auto-create feature,...

DELL EMC PowerScale 权限许可和访问控制问题漏洞

Dell EMC PowerScale OneFS is an API-powered file system. Dell EMC PowerScale OneFS 8.1.2, 8.2.2 is vulnerable to privilege permission and access control issues. An attacker with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges could exploit this vulnerability to corrupt cryptographic operations...

PT-2021-11222

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 Description: The issue is related to an Incorrect Permission Assignment for a Critical Resource, which may allow a non-admin user with either ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH...

PT-2021-11220

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.2.0 through 9.1.0 Description: The issue allows a non-admin user with either ISI PRIV LOGIN CONSOLE or ISI PRIV LOGIN SSH privileges to potentially exploit it and read arbitrary data, tamper with system...

DELL EMC PowerScale 安全漏洞

DELL EMC PowerScale is a horizontally scalable storage system for unstructured data from Dell DELL. A security vulnerability exists in Dell EMC PowerScale OneFS versions 8.1.2 - 9.1.0 that stems from an issue where OneFS SMB directory auto-creation may incorrectly create directories for users. An...

PT-2021-11224

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue is related to a Backup/Restore Privilege implementation problem. A user with the BackupAdmin role may potentially exploit this, resulting in the ability to write da...

PT-2021-7427

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.1.0 through 9.1.0 Description The issue is related to a flaw in the authentication procedure when using an account with an expired term. This could allow a remote attacker to gain unauthorized access to protect...

CVE-2021-21502

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISIPRIVAUTHSSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before...

Dell EMC Isilon OneFS and Dell EMC PowerScale OneFS Elevation of Privilege Vulnerabilities

Dell EMC Isilon OneFS and Dell EMC PowerScale OneFS are both a set of horizontally scalable storage systems for unstructured data from Dell USA. A security vulnerability exists in Dell EMC Isilon OneFS version 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0, which originates from a...

CVE-2020-26181

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if...

CVE-2020-26181

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if...

Privilege escalation

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if...

CVE-2020-26181

Dell EMC Isilon OneFS (8.1+) and Dell EMC PowerScale OneFS (9.0.0) expose a local privilege-escalation in SmartLock Compliance mode clusters. The compadmin user who can authenticate via ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate to root if they possess ISI PRIV HARDENING privileges....