Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21506 EUVD-2021-8778GHSA-3pjr-v8w5-hm42

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV…

Published Mar 8, 2021 · Updated Sep 16, 2024 · Assigned by dell

Vendor: Dell Product: PowerScale OneFS

Description

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS unspecified – < 8.1.2, 8.2.2,9.1.0.x,EMPIRE (9.2.0), GOTHAM 8.1.2, 8.2.2,9.1.0.x,EMPIRE (9.2.0), GOTHAM

References