PT-2021-14578

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x Description The issue is related to an Exposure of Information through Directory Listing. This problem occurs when upgrading from a previous version. Recommendations For versions 9.1.0...

PT-2021-21209

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS affected versions not specified Description The issue is related to an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentiall...

PT-2021-21217

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale Nodes affected versions not specified Description The issue is related to a hardware design flaw in Dell EMC PowerScale Nodes, which may allow a local unauthenticated user to escalate privileges. This flaw also affects...

CVE-2021-36315: Undefined Security Weakness

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

CVE-2021-36305: Improper Synchronization

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB...

CVE-2021-21528: Exposure of Information Through Directory Listing

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgrading from a previous versions...

EMC PowerScale 安全漏洞

DELL EMC PowerScale is a horizontally scalable storage system for unstructured data from Dell USA. A security vulnerability exists in Dell EMC PowerScale that stems from a hardware design flaw in the Dell EMC PowerScale node. An attacker could exploit the vulnerability to cause a user to escalate...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS that stems from Dell PowerScale OneFS containing asynchronous access to shared data in the context of multi-threaded SMB CA processing. An...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, Inc. Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.0, 9.2.1.0 contain a security vulnerability that could be exploited by an attacker to gain access to information via directory listings...

CVE-2021-36315

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

CVE-2021-21528

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgrading from a previous versions...

CVE-2021-36305

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB...

CVE-2021-21561

Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicious user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE privileges to gain access to sensitive information in the log files...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. An information disclosure vulnerability exists in Dell EMC PowerScale OneFS versions 8.2., 9.1.0.. The vulnerability stems from log files that include sensitive information. An attacker could exploit the vulnerability to gain unauthorized...

Dell EMC PowerScale OneFS has an unspecified vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.1.0. of Dell EMC PowerScale OneFS is vulnerable to the use of uninitialized resources. No details of the vulnerability are currently available...

Dell EMC PowerScale OneFS has an unspecified vulnerability (CNVD-2021-73944)

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect critical resource privilege assignment. An attacker could use this vulnerability to gain unauthorized access to cluster-related information...

Dell EMC PowerScale OneFS OS Elevation of Privilege Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. security vulnerability exists in Dell EMC PowerScale OneFS version 8.2.-9.1.1.. An attacker could exploit the vulnerability to elevate privileges...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability

Dell EMC PowerScale OneFS, an API-driven file system, is vulnerable to an information disclosure in Dell EMC PowerScale OneFS version 8.2.2-9.1.0.. The vulnerability stems from the product's use of a get request method with a sensitive query string. An attacker could exploit the vulnerability to...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability (CNVD-2021-73938)

Dell EMC PowerScale OneFS is an API-driven file system. an information disclosure vulnerability exists in Dell EMC PowerScale OneFS versions 8.2.-9.2.. The vulnerability stems from improper handling of exception conditions. An attacker could use the vulnerability to obtain information out of...

Dell EMC PowerScale OneFS OS Command Injection Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...