What is CVE-2020-26181?

CVE-2020-26181 is a high-severity vulnerability in Dell EMC Isilon Onefs, classified under Improper Privilege Management. CVSS score: 7.0/10. Published 2021-01-05.

How severe is CVE-2020-26181?

High severity. CVSS v3 base score is 7.0 out of 10.

Privilege escalation in Dell EMC Isilon Onefs

CVE-2020-26181

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if they have ISI PRIV HARDENING privileges.

Vulnerability class: Privilege Escalation

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Emc_isilon_onefs
Dell Emc_powerscale_onefs — versions 9.0.0
Dell Powerscale Onefs — versions unspecified

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-26181?: CVE-2020-26181 is a high-severity vulnerability in Dell EMC Isilon Onefs, classified under Improper Privilege Management. CVSS score: 7.0/10. Published 2021-01-05.
How severe is CVE-2020-26181?: High severity. CVSS v3 base score is 7.0 out of 10.