CVE-2021-21568

published 2021-08-16

CVE-2021-21568: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make un-audited and un-trackable configuration changes to settings that their roles have privileges to change.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
dell	emc_powerscale_onefs	—	—
dell	emc_powerscale_onefs	9.0.0.0 – 9.2.1	—
dell	powerscale_onefs	—	—

CWE-269