CVE-2020-5353

published 2021-07-29

CVE-2020-5353: The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier (UID) over NFS to rewrite sensitive files to gain administrative access to the system.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
dell	emc_isilon_onefs	<= 8.2.2	—
dell	emc_powerscale_onefs	—	—
dell	isilon_onefs	>= unspecified < All supported	All supported

CWE-276