CVE-2021-36280

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE to access privileged information about the cluster.

Score

CVSS 3.1 7.8 High

Status

Modified - security_alert@emc.com

Published

2021-08-16

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Emc Powerscale Onefs (Dell)
• Powerscale Onefs (Dell)

References

• https://www.dell.com/support/kbdoc/000190408