PT-2020-18435 · Dell Emc · Dell Emc Powerscale+1

Published 2020-07-06 · Updated 2020-07-14 · CVE-2020-5371

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon OneFS versions 8.2.2 and earlier Dell EMC PowerScale version 9.0.0

Description The issue concerns a file permissions vulnerability. An attacker with network or local file access could exploit insufficiently applied file permissions to gain unauthorized access to files.

Recommendations For Dell EMC Isilon OneFS versions 8.2.2 and earlier, update to a version later than 8.2.2 to resolve the issue. For Dell EMC PowerScale version 9.0.0, consider restricting file access until a patch is available. As a temporary workaround, consider restricting network and local file access to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-5371

Affected Products

Dell Emc Isilon Onefs

Dell Emc Powerscale

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-5371 · Security Note
• https://dell.com/support/security/en-us/details/544593/DSA-2020-155-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-Security-Update-for-a-Permissions-Vuln · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5371 · Vendor Advisory
• https://t.me/cvenotify/4878 · Telegram Post