CVE-2020-26195CWE-280

Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user

Medium · published February 9, 2021

CVSS v3.1
5.3
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated attacker may take advantage of this issue to slow down the system.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01804 · 78.4th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2021-02-09T21:25Z
EPSS history
Timeline
  • 09 FEB 21:25Z
    Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user
    cvelistv5