Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-5328 EUVD-2020-26510GHSA-974p-hcqc-3w9p

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks w…

Published Mar 6, 2020 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur.

Affected products

VendorProductAffectedFixed
Dell Isilon OneFS unspecified – < 8.2.0 8.2.0

References