VYPR
← All advisories
High severity7.0NVD Advisory· Published Jan 5, 2021· Updated Jun 17, 2026

CVE-2020-26181

CVE-2020-26181

Description

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if they have ISI PRIV HARDENING privileges.

Affected products

6
  • Dell/Emc Isilon Onefs
    cpe:2.3:a:dell:emc_isilon_onefs:*:*:*:*:*:*:*:*
    Range: <=8.1.0.0
  • Dell/Powerscale Onefs3 versions
    cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 9.0.0
    • (no CPE)range: unspecified
  • EMC Corporation/OneFSllm-create
    Range: 8.1 and later, 9.0.0
  • Dell/Isilon OneFSllm-fuzzy
    Range: 8.1 and later

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.