CVE-2020-26181: High severity Dell EMC Isilon OneFS vulnerability
Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if they have ISI PRIV HARDENING privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-26181?
CVE-2020-26181 is a privilege escalation vulnerability on a SmartLock Compliance mode cluster in Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0.
How severe is CVE-2020-26181?
CVE-2020-26181 has a severity rating of 7.8 (High).
How does CVE-2020-26181 affect Dell EMC Isilon OneFS?
CVE-2020-26181 affects Dell EMC Isilon OneFS versions 8.1 and later.
How does CVE-2020-26181 affect Dell EMC PowerScale OneFS?
CVE-2020-26181 affects Dell EMC PowerScale OneFS version 9.0.0.
Is there a security update available for CVE-2020-26181?
Yes, Dell has released a security update for CVE-2020-26181. More information can be found at https://www.dell.com/support/security/en-us/details/546720/DSA-2020-227-Dell-EMC-PowerScale-OneFS-and-Dell-EMC-Isilon-OneFS-Security-Update-for-SmartLock-Co