CVE-2020-26191: High severity dell emc isilon onefs vulnerability
Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISIPRIVJOBENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service to users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26191?
CVE-2020-26191 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2020-26191?
To remediate CVE-2020-26191, update Dell EMC PowerScale OneFS to a version higher than 9.1.0.
What versions of Dell EMC PowerScale OneFS are affected by CVE-2020-26191?
Versions 8.1.0 through 9.1.0 of Dell EMC PowerScale OneFS are vulnerable to CVE-2020-26191.
What kind of impact does CVE-2020-26191 have on system security?
CVE-2020-26191 allows users with certain privileges to escalate their access, potentially leading to data exposure and service denial.
Is there any known exploit for CVE-2020-26191?
As of now, there are no public exploits known for CVE-2020-26191, but it remains critical to apply patches to mitigate risks.