Impact
Critical
Details
Summary:
Dell EMC Isilon OneFS and Dell EMC PowerScale OneFS contain a remediation for a SyncIQ privilege escalation that may be exploited by malicious users to compromise the affected system.
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files.
CVSS v3.1 Base Score: 8.8 (/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files.
CVSS v3.1 Base Score: 8.8 (/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
Affected Products and Remediation
Affected products:
Dell EMC Isilon OneFS versions 8.2.2 and earlier.
Dell EMC PowerScale OneFS version 9.0.0.
Resolution:
For Dell EMC Isilon OneFS versions 8.2.2 and 8.1.2, the fix for this issue is included with the August, 2020 Roll-up Patch, as well as all future Roll-up Patches.
For Dell EMC PowerScale OneFS version 9.0.0, the fix for this issue is included with the August, 2020 Roll-up Patch, as well as all future Roll-up Patches.
For more information and to obtain a Roll-up patch, see the
Current PowerScale and Isilon OneFS Patches document.
Affected products:
Dell EMC Isilon OneFS versions 8.2.2 and earlier.
Dell EMC PowerScale OneFS version 9.0.0.
Resolution:
For Dell EMC Isilon OneFS versions 8.2.2 and 8.1.2, the fix for this issue is included with the August, 2020 Roll-up Patch, as well as all future Roll-up Patches.
For Dell EMC PowerScale OneFS version 9.0.0, the fix for this issue is included with the August, 2020 Roll-up Patch, as well as all future Roll-up Patches.
For more information and to obtain a Roll-up patch, see the
Current PowerScale and Isilon OneFS Patches document.
Related Information
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide