CVE-2021-21553: High severity Dell PowerScale OneFS vulnerability

Q: What is the vulnerability ID for this Dell PowerScale OneFS vulnerability?

The vulnerability ID for this Dell PowerScale OneFS vulnerability is CVE-2021-21553.

Q: What is the title of this Dell PowerScale OneFS vulnerability?

The title of this Dell PowerScale OneFS vulnerability is 'Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability'.

Q: What is the severity of CVE-2021-21553?

The severity of CVE-2021-21553 is high with a severity value of 8.8.

Q: How can this vulnerability in Dell PowerScale OneFS be exploited?

Under specific conditions, the CompAdmin user can elevate privileges and break out of Compliance mode in Dell PowerScale OneFS.

Q: How should I mitigate the vulnerability in Dell PowerScale OneFS?

Dell recommends upgrading Dell PowerScale OneFS to the latest version to mitigate this vulnerability.

Published Aug 2, 2021

Updated

Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest.

Affected Software

2 affected components

Dell PowerScale OneFS>=8.1.0<=9.1.0

Event History

Aug 2, 2021

CVE Published

via MITRE·11:45 PM

Data Sourced

via MITRE·11:45 PM

DescriptionSeverityWeakness

Aug 3, 2021

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Dell PowerScale OneFS vulnerability?

The vulnerability ID for this Dell PowerScale OneFS vulnerability is CVE-2021-21553.

What is the title of this Dell PowerScale OneFS vulnerability?

The title of this Dell PowerScale OneFS vulnerability is 'Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability'.

What is the severity of CVE-2021-21553?