Skip to content
OpenAdvisories
High · 7.8 CVE-2020-26192 EUVD-2020-18817GHSA-m2cf-c967-wmcg

Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_…

Published Feb 9, 2021 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service to users. Note: no non-admin users or roles have these privileges by default.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS unspecified – < 8.2.2, 9.1+ 8.2.2, 9.1+

References