Description
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | PowerStore 500T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 1000T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 1200T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 3000T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 3200Q | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 3200T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 5000T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 5200Q | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 5200T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 7000T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 9000T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |
| Dell | PowerStore 9200T | < 5.0.0.2-2761110 or later | 5.0.0.2-2761110 or later |