PT-2021-11221
CVE-2020-26193
·
تاريخ النشر
2021-02-09
·
تاريخ التحديث
2021-02-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0
Description:
The issue is related to improper input validation, allowing a user with the
ISI PRIV CLUSTER privilege to execute arbitrary OS commands on the application's underlying OS with the privileges of the vulnerable application.Recommendations:
For Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0, consider restricting the
ISI PRIV CLUSTER privilege to minimize the risk of exploitation until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾