PT-2021-11224 · Dell Emc · Dell Emc Powerscale Onefs

Published 2021-02-09 · Updated 2021-02-12 · CVE-2020-26196

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0

Description: The issue is related to a Backup/Restore Privilege implementation problem. A user with the BackupAdmin role may potentially exploit this, resulting in the ability to write data outside of the intended file system location.

Recommendations: For Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0, consider restricting the BackupAdmin role privileges until a fix is available to prevent potential exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-26196

Affected Products

Dell Emc Powerscale Onefs

References · 4

• https://dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26196 · Security Note
• https://t.me/cibsecurity/23342 · Telegram Post