VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 6, 2020· Updated Jun 17, 2026

CVE-2020-5318

CVE-2020-5318

Description

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are enabled, and Basic Authentication is enabled for either or both components, files are accessible without authentication.

Affected products

6
  • Dell/Emc Isilon Onefs4 versions
    cpe:2.3:a:dell:emc_isilon_onefs:8.0.0.7:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:dell:emc_isilon_onefs:8.0.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_isilon_onefs:8.1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_isilon_onefs:8.1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_isilon_onefs:8.1.2:*:*:*:*:*:*:*
  • Dell/Isilon OneFSllm-fuzzy
    Range: 8.1.2, 8.1.0.4, 8.1.0.3, 8.0.0.7
  • Dell/Dell EMC Isilon OneFScpe-rescue
    Range: 8.1.2, 8.1.0.4, 8.1.0.3, 8.0.0.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2020-5318 · High · VYPR