CVE-2021-21502 Auth bypass in PowerScale OneFS
Expired user accounts with SSH privileges can retain access, allowing unauthorized actions and potential privilege escalation in Dell PowerScale OneFS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21502?
CVE-2021-21502 is a critical authentication bypass vulnerability in Dell Emc Powerscale Onefs, published on 9 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.
Weakness: CWE-287
Which versions are affected by CVE-2021-21502?
It affects 1 product.
Products include Dell Emc Powerscale Onefs.
How do I fix CVE-2021-21502?
No fix has been published for CVE-2021-21502 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-21502 being exploited?
There is no known exploitation of CVE-2021-21502 in the wild and no public exploit code.
Other vulnerabilities in Dell Emc Powerscale Onefs
Sources
Also known as GHSA-pw6f-fxqf-2vxp.