Critical · published February 9, 2021
🚨 A high-privilege SSH key can keep working even after your account is expired! This sneaky flaw in Dell PowerScale OneFS can have critical consequences. 🔥 This is like allowing someone to continue using their old keycard to access secure areas long after they’ve left the company—giving them a backstage pass they should no longer have! An attacker with this vulnerability could exploit their expired account, regaining access to sensitive data and systems as if nothing had happened. This could lead to unauthorized actions, data breaches, or even severe outages—absolutely devastating for security and trust!
This is like allowing someone to continue using their old keycard to access secure areas long after they’ve left the company—giving them a backstage pass they should no longer have! CVE-2021-21502 allows users with the ISI_PRIV_AUTH_SSH RBAC privilege to access SSH keys even after their accounts have expired, bypassing normal security measures and retaining prior permissions.
An attacker with this vulnerability could exploit their expired account, regaining access to sensitive data and systems as if nothing had happened. This could lead to unauthorized actions, data breaches, or even severe outages—absolutely devastating for security and trust! Dell recommends upgrading to a version after 9.1.0 immediately to patch this vulnerability. Additionally, review your user accounts and SSH key policies to ensure expired accounts can’t access systems. Regular audits will help maintain a secure environment! You've got this! Implement these steps and you'll be back on the path to safety in no time! 🛡️