CVE-2020-26196

Published: Feb 9, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location.

Affected (8)

Products: Dell: Emc Powerscale Onefs

Dell

1 product

Emc Powerscale Onefs

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Powerscale Onefs	Version 8.1.0
Dell Emc Powerscale Onefs	Version 8.1.1
Dell Emc Powerscale Onefs	Version 8.1.2
Dell Emc Powerscale Onefs	Version 8.2.0
Dell Emc Powerscale Onefs	Version 8.2.1
Dell Emc Powerscale Onefs	Version 8.2.2
Dell Emc Powerscale Onefs	Version 9.0.0
Dell Emc Powerscale Onefs	Version 9.1.0

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.