Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-21502 EUVD-2021-8774GHSA-pw6f-fxqf-2vxp

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with t…

Published Feb 9, 2021 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS unspecified – < 8.1.2 / 8.2.2 / 9.1.0.x / Empire / Main 8.1.2 / 8.2.2 / 9.1.0.x / Empire / Main

References