CVE-2021-21599

published 2021-08-16

CVE-2021-21599: Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISI_PRIV_LOGIN_SSH or…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE to escalate privileges and escape the compliance guarantees. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
dell	emc_powerscale_onefs	—	—
dell	emc_powerscale_onefs	9.0.0.0 – 9.2.1	—
dell	powerscale_onefs	—	—

CWE-78