CVE-2020-26180

Name of the Vulnerable Software and Affected Versions: Dell EMC Isilon OneFS versions 8.1 and later Dell EMC PowerScale OneFS version 9.0.0

Description: The issue concerns an access problem with the remotesupport user account, allowing a remote malicious user with low privileges to gain access to data stored on the /ifs directory through most protocols.

Recommendations: For Dell EMC Isilon OneFS versions 8.1 and later, consider restricting access to the remotesupport user account until a fix is available. For Dell EMC PowerScale OneFS version 9.0.0, restrict access to the /ifs directory to minimize the risk of exploitation. As a temporary workaround, consider disabling the remotesupport user account until a patch is available.