PT-2021-14636 · Dell Emc · Dell Emc Powerscale Onefs

Published 2021-08-16 · Updated 2021-08-25 · CVE-2021-21592

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x

Description The issue is related to improper handling of an exceptional condition, which could be exploited by a remote low privileged user, potentially leading to unauthorized information disclosure.

Recommendations For versions 8.2.x through 9.2.x, update to a version that properly handles exceptional conditions to prevent unauthorized information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2021-21592

Affected Products

Dell Emc Powerscale Onefs

References · 4

• https://dell.com/support/kbdoc/000190408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21592 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21592 · Vendor Advisory
• https://t.me/cvenotify/19508 · Telegram Post