Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: Dell Component: Emc Isilon Onefs Clear all filters
TI-2020-04406 CVE-2020-5355 · GHSA-w2f6-jgw8-wpp3

Incorrect default permissions in Dell Isilon OneFS

Priority LOW 21

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00478 Published 2022-10-21 Fixed in 8.2.2 CWE-276
TI-2020-04405 CVE-2020-5353 · GHSA-54h3-rfwf-3g76

Incorrect default permissions in Dell Isilon OneFS

Priority MEDIUM 40

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00991 Published 2021-07-29 Fixed in All supported CWE-276
TI-2020-16010 CVE-2020-26180 · GHSA-qxrq-2x5c-28pr

Incorrect default permissions in Dell PowerScale OneFS

Priority LOW 39

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00593 Published 2021-07-28 Fixed in OneFS 8.1.2, 8.2.2 +1 CWE-276
TI-2020-16011 CVE-2020-26181 · GHSA-6qqx-5fph-qx4j

Improper privilege management in Dell PowerScale OneFS

Priority LOW 34

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00258 Published 2021-01-05 Fixed in 8.1.2, 8.2.2 +1 CWE-269
TI-2020-04420 CVE-2020-5369 · GHSA-cx2g-924g-69p7

Incorrect permission assignment in Dell Isilon OneFS

Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01214 Published 2020-09-02 Fixed in 8.1.2, 8.2.2 +1 CWE-732
TI-2020-04422 CVE-2020-5371 · GHSA-6r2w-q2xm-x34q

Incorrect permission assignment in Dell Isilon OneFS

Priority MEDIUM 40

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01152 Published 2020-07-06 No fix listed CWE-732
TI-2020-04415 CVE-2020-5364 · GHSA-gmvp-mvgx-r28q

Information disclosure in Dell Isilon OneFS

Priority LOW 35

Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00985 Published 2020-05-20 Fixed in 8.2.2 CWE-201
TI-2020-04381 CVE-2020-5328 · GHSA-974p-hcqc-3w9p

Missing authentication in Dell Isilon OneFS

Priority MEDIUM 45

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01387 Published 2020-03-06 Fixed in 8.2.0 CWE-306
TI-2020-04372 CVE-2020-5318 · GHSA-66v6-5j2p-j3gh

Improper authorization in Dell Isilon OneFS

Priority LOW 35

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01126 Published 2020-02-06 No fix listed CWE-285
TI-2018-01124 CVE-2018-1213 · GHSA-m3vj-jgw6-mmqv

Cross-site request forgery in Dell EMC Isilon OneFS

Priority MEDIUM 42

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01932 Published 2018-03-26 No fix listed CWE-352
TI-2018-01118 CVE-2018-1204 · GHSA-fqgg-5297-h6r4

Path traversal in Dell EMC Isilon OneFS

Priority LOW 34

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.02319 Published 2018-03-26 No fix listed CWE-22