CVE-2020-5355CWE-276

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding

Medium · published October 21, 2022

CVSS v3.1
4.3
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding. This provides the remotesupport user and users with restricted shells more access than is intended.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-10-21T18:05Z
EPSS history
Timeline
  • 21 OCT 18:05Z
    The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding
    cvelistv5