Skip to content
OpenAdvisories
Medium · 4.4 CVE-2021-21562 EUVD-2021-8834GHSA-cj3x-qg3h-5v73

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI…

Published Aug 2, 2021 · Updated Sep 17, 2024 · Assigned by dell

Vendor: Dell Product: PowerScale OneFS

Description

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the application’s direct control.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS 8.1.2, 8.1.3, 9.1.0.x, 9.0.0.x —

References