PT-2021-11217 · Dell Emc · Dell Emc Isilon Onefs+1

Published 2021-01-05 · Updated 2021-10-04 · CVE-2020-26181

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Dell EMC Isilon OneFS versions 8.1 and later Dell EMC PowerScale OneFS version 9.0.0

Description: The issue concerns a privilege escalation vulnerability on a SmartLock Compliance mode cluster. A compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if they have ISI PRIV HARDENING privileges.

Recommendations: For Dell EMC Isilon OneFS versions 8.1 and later, consider restricting the ISI PRIV HARDENING privileges to prevent privilege escalation. For Dell EMC PowerScale OneFS version 9.0.0, restrict access to ISI PRIV LOGIN SSH and ISI PRIV LOGIN CONSOLE to minimize the risk of exploitation. As a temporary workaround, consider disabling the compadmin user's ability to connect using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE until a patch is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-26181

Affected Products

Dell Emc Isilon Onefs

Dell Emc Powerscale Onefs

References · 5

• https://osv.dev/vulnerability/CVE-2020-26181 · Vendor Advisory
• https://dell.com/support/security/en-us/details/546720/DSA-2020-227-Dell-EMC-PowerScale-OneFS-and-Dell-EMC-Isilon-OneFS-Security-Update-for-SmartLock-Co · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26181 · Security Note
• https://t.me/cibsecurity/21643 · Telegram Post
• https://t.me/cvenotify/8337 · Telegram Post