Vulnerability Details CVE-2021-21553
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.2%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 7.2
References
Products affected by CVE-2021-21553
-
cpe:2.3:a:dell:powerscale_onefs:8.1.1
-
cpe:2.3:a:dell:powerscale_onefs:8.1.2
-
cpe:2.3:a:dell:powerscale_onefs:8.1.3
-
cpe:2.3:a:dell:powerscale_onefs:8.2
-
cpe:2.3:a:dell:powerscale_onefs:8.2.0
-
cpe:2.3:a:dell:powerscale_onefs:8.2.1
-
cpe:2.3:a:dell:powerscale_onefs:8.2.2
-
cpe:2.3:a:dell:powerscale_onefs:8.2.2.0
-
cpe:2.3:a:dell:powerscale_onefs:9.0
-
cpe:2.3:a:dell:powerscale_onefs:9.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.0.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.1
-
cpe:2.3:a:dell:powerscale_onefs:9.1.0