VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2021-21502

CVE-2021-21502

Description

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Dell/Powerscale Onefs10 versions
    cpe:2.3:o:dell:emc_powerscale_onefs:8.1.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.1.0 – 9.1.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.