CVE-2020-26194: High severity dell emc isilon onefs vulnerability
Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vulnerability. This may allow a non-admin user with either ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to exploit the vulnerability, leading to compromised cryptographic operations. Note: no non-admin users or roles have these privileges by default.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26194?
CVE-2020-26194 is categorized as a critical vulnerability due to its potential to allow non-admin users to compromise cryptographic resources.
How do I fix CVE-2020-26194?
To mitigate CVE-2020-26194, update Dell EMC PowerScale OneFS to a version that addresses this vulnerability, specifically versions later than 8.1.2 and 8.2.2.
Who is affected by CVE-2020-26194?
CVE-2020-26194 affects users of Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2.
What types of privileges can exploit CVE-2020-26194?
Users with ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH privileges can exploit CVE-2020-26194.
What are the potential impacts of CVE-2020-26194?
Exploitation of CVE-2020-26194 may lead to unauthorized access and compromise of cryptographic operations within the affected systems.