CVE-2020-5328

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2020-03-06

Last modified

2024-09-16

Weaknesses

CWE-306

Affected products

• Emc Isilon Onefs (Dell)
• Isilon Onefs (Dell)

References

• https://www.dell.com/support/security/en-us/details/541423/DSA-2020-039-Dell-EMC-Isilon-OneFS-Security-Update-for-a-Syn…