CVE-2020-26196CWE-732

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue

Medium · published February 9, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-02-09T21:25Z
EPSS history
Timeline
  • 09 FEB 21:25Z
    Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue
    cvelistv5