Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service to users.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权管理不恰当
Vulnerability Title
DELL EMC PowerScale 权限许可和访问控制问题漏洞
Vulnerability Description
DELL EMC PowerScale是美国戴尔(DELL)公司的一套适用于非结构化数据的横向扩展存储系统。 Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 存在权限许可和访问控制问题漏洞,攻击者可利用该漏洞读取任意数据、篡改系统软件或拒绝为用户提供服务。
CVSS Information
N/A
Vulnerability Type
N/A