Vulnerability Details CVE-2020-26197
Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication provider.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.4
References
Products affected by CVE-2020-26197
-
cpe:2.3:o:dell:emc_powerscale_onefs:8.1.0
-
cpe:2.3:o:dell:emc_powerscale_onefs:8.1.1
-
cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2
-
cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2