dell powerscale onefs vulnerabilities and exploits

(subscribe to this query)

NA

Dell PowerScale OneFS, versions 8.2.x up to and including 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.

Dell Powerscale Onefs 9.0.0 Dell Powerscale Onefs 9.1.0 Dell Powerscale Onefs 9.3.0 Dell Powerscale Onefs 9.2.1 Dell Powerscale Onefs 9.2.0 Dell Powerscale Onefs 9.1.1 Dell Powerscale Onefs 8.2.0 Dell Powerscale Onefs 8.2.2 Dell Powerscale Onefs 8.2.1

5

CVSSv2

Dell PowerScale OneFS versions 8.2.0.x up to and including 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise.

Dell Powerscale Onefs 9.0.0 Dell Powerscale Onefs 9.1.0 Dell Powerscale Onefs 9.3.0 Dell Powerscale Onefs 9.2.1 Dell Powerscale Onefs 9.2.0 Dell Powerscale Onefs 9.1.1

7.5

CVSSv2

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them acces...

Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 8.1.0 Dell Emc Powerscale Onefs 8.1.1 Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.1.2 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.1.0

4.6

CVSSv2

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system soft...

Dell Emc Powerscale Onefs 8.1.0 Dell Emc Powerscale Onefs 8.1.1 Dell Emc Powerscale Onefs 8.1.2 Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 9.1.0

7.2

CVSSv2

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI_PRIV_CLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the priv...

Dell Emc Powerscale Onefs 8.1.0 Dell Emc Powerscale Onefs 8.1.1 Dell Emc Powerscale Onefs 8.1.2 Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 9.1.0

2.1

CVSSv2

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location.

Dell Emc Powerscale Onefs 8.1.0 Dell Emc Powerscale Onefs 8.1.1 Dell Emc Powerscale Onefs 8.1.2 Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 9.1.0

4

CVSSv2

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.

Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.0.0.0 Dell Emc Powerscale Onefs 9.1.0.0 Dell Emc Powerscale Onefs 9.2.0.0 Dell Emc Powerscale Onefs 9.2.1.0 Dell Emc Powerscale Onefs 9.1.1.0

NA

Dell PowerScale OneFS, versions 9.2.0.x up to and including 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak.

Dell Powerscale Onefs 9.3.0 Dell Powerscale Onefs 9.2.1 Dell Powerscale Onefs 9.2.0 Dell Powerscale Onefs 9.4.0

5

CVSSv2

Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated attacker may take advantage of this issue to slow down the system.

Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.1.2 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.1.0

4.6

CVSSv2

Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service ...

Dell Emc Powerscale Onefs 8.2.0 Dell Emc Powerscale Onefs 8.2.1 Dell Emc Powerscale Onefs 8.2.2 Dell Emc Powerscale Onefs 9.0.0 Dell Emc Powerscale Onefs 9.1.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook