CVE-2021-21567: High severity Dell PowerScale OneFS vulnerability
Published Aug 10, 2021
·Updated
Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege.
Affected Software
4 affected components
Dell PowerScale OneFS=9.0.0.0
Dell PowerScale OneFS=9.1.0.0
Dell PowerScale OneFS=9.0.0.0
Dell PowerScale OneFS=9.1.0.0
Remediation
Patch Available
Event History
Aug 10, 2021
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Dell PowerScale OneFS vulnerability?
The vulnerability ID for this Dell PowerScale OneFS vulnerability is CVE-2021-21567.
2
What is the severity of CVE-2021-21567?
The severity of CVE-2021-21567 is high with a CVSS score of 7.8.
3
What is the affected software?
The affected software is Dell PowerScale OneFS versions 9.0.0.0 and 9.1.0.0.
4
How does the vulnerability in Dell PowerScale OneFS allow privilege elevation?
The vulnerability in Dell PowerScale OneFS allows an authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE to elevate privilege.
5
Is there a fix available for CVE-2021-21567?
It is recommended to update to Dell PowerScale OneFS version 9.1.1.x to mitigate the vulnerability.