Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
dell emc powerscale onefs 9.0.0 |
||
dell emc powerscale onefs 8.1.0 |
||
dell emc powerscale onefs 8.1.1 |
||
dell emc powerscale onefs 8.2.0 |
||
dell emc powerscale onefs 8.2.1 |
||
dell emc powerscale onefs 8.1.2 |
||
dell emc powerscale onefs 8.2.2 |
||
dell emc powerscale onefs 9.1.0 |
Vulmon