CVE-2021-21562: Medium severity dell emc isilon onefs vulnerability
Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE) and (ISIPRIVSYSUPGRADE or ISIPRIVAUDIT) to provide an untrusted path which can lead to run resources that are not under the application’s direct control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21562?
CVE-2021-21562 is classified as a high severity vulnerability due to its potential impact on system security.
How do I fix CVE-2021-21562?
To fix CVE-2021-21562, ensure that your Dell EMC PowerScale OneFS is updated to a patched version released by Dell.
Who is affected by CVE-2021-21562?
CVE-2021-21562 affects users with privileges such as ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE and either ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT on specific versions of Dell EMC PowerScale OneFS.
What versions of Dell EMC PowerScale OneFS are vulnerable to CVE-2021-21562?
CVE-2021-21562 affects Dell EMC PowerScale OneFS versions 8.1.2, 8.1.3, 9.0.0.0, and 9.1.0.0.
What impact does CVE-2021-21562 have?
CVE-2021-21562 can allow an attacker with the necessary privileges to execute untrusted code, leading to potential unauthorized access or system compromise.