CVE-2020-5328 — Dell / Isilon OneFS

CVE-2020-5328

Dell / Isilon OneFS PUBLISHED

Description (CNA)

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur.

Affected (CNA)

Vendor / product	Versions
Dell / Isilon OneFS	affected unspecified before 8.2.0

CWE

CWE-306

References

https://www.dell.com/support/security/en-us/details/541423/DSA-2020-039-Dell-EMC-Isilon-OneFS-Security-Update-for-a-SyncIQ-Vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/security/en-us/details/541423/DSA-2020-039-Dell-EMC-Isilon-OneFS-Security-Update-for-a-SyncIQ-Vulnerability