What is CVE-2021-21562?

CVE-2021-21562 is a medium-severity vulnerability in Dell Emc Powerscale Onefs, classified under Untrusted Search Path. CVSS score: 4.4/10. Published 2021-08-03.

How severe is CVE-2021-21562?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Dell Emc Powerscale Onefs

CVE-2021-21562

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the application’s direct control.

EPSS: 0.002 (13.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Dell Emc_powerscale_onefs — versions 8.1.2, 8.1.3, 9.0.0.0
Dell Powerscale Onefs — versions 8.1.2, 8.1.3, 9.1.0.x, 9.0.0.x

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

security_alert@emc.com (x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2021-21562?: CVE-2021-21562 is a medium-severity vulnerability in Dell Emc Powerscale Onefs, classified under Untrusted Search Path. CVSS score: 4.4/10. Published 2021-08-03.
How severe is CVE-2021-21562?: Medium severity. CVSS v3 base score is 4.4 out of 10.