CVE-2020-26192
published 2021-02-09CVE-2020-26192: Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or…
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service to users. Note: no non-admin users or roles have these privileges by default.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | emc_powerscale_onefs | — | — |
| dell | emc_powerscale_onefs | — | — |
| dell | emc_powerscale_onefs | — | — |
| dell | emc_powerscale_onefs | — | — |
| dell | emc_powerscale_onefs | — | — |
| dell | powerscale_onefs | >= unspecified < 8.2.2, 9.1+ | 8.2.2, 9.1+ |