Powerscale Onefs@9.1.0.0 Security Vulnerabilities and Issues — Powerscale Onefs@9.1.0.0 CVE List

Lucene search

DellPowerscale Onefs9.1.0.0

4 matches found

CVE•added 2021/08/16 10:15 p.m.•73 views

CVE-2021-36278

Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in log files. A local malicious user with ISI_PRIV_LOGIN_SSH, ISI_PRIV_LOGIN_CONSOLE, or ISI_PRIV_SYS_SUPPORT privileges may exploit this vulnerability to access sensitive informati...

8.1CVSS5.2AI score0.00187EPSS

CVE•added 2021/08/10 7:15 p.m.•46 views

CVE-2021-21567

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE to elevate privilege.

7.8CVSS7.5AI score0.0004EPSS

CVE•added 2021/11/12 11:15 p.m.•42 views

CVE-2021-36305

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.

6.5CVSS6.3AI score0.00237EPSS

CVE•added 2021/08/03 12:15 a.m.•40 views

CVE-2021-21562

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the applicatio...

4.4CVSS4.7AI score0.00056EPSS