CVE-2020-26196: Medium severity dell emc isilon onefs vulnerability

Published Feb 9, 2021

Updated

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location.

Affected Software

8 affected components

Dell EMC PowerScale OneFS=8.1.0

Dell EMC PowerScale OneFS=8.1.1

Dell EMC PowerScale OneFS=8.1.2

Dell EMC PowerScale OneFS=8.2.0

Dell EMC PowerScale OneFS=8.2.1

Dell EMC PowerScale OneFS=8.2.2

Dell EMC PowerScale OneFS=9.0.0

Dell EMC PowerScale OneFS=9.1.0

Event History

Feb 9, 2021

CVE Published

via MITRE·09:25 PM

Data Sourced

via MITRE·09:25 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-26196?

CVE-2020-26196 is classified as a medium severity vulnerability.

What versions of PowerScale OneFS are affected by CVE-2020-26196?

CVE-2020-26196 affects Dell EMC PowerScale OneFS versions 8.1.0 to 9.1.0.

How do I fix CVE-2020-26196?

To fix CVE-2020-26196, you should apply the latest security updates provided by Dell for PowerScale OneFS.

Can a user with BackupAdmin role exploit CVE-2020-26196?

Yes, a user with the BackupAdmin role can potentially exploit CVE-2020-26196 to write data outside of the intended file system location.

Is there a workaround for CVE-2020-26196?

Currently, there is no publicly documented workaround for CVE-2020-26196, so applying patches is recommended.