medium4.3
CVE-2021-21568
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability.
Impact
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make un-audited and un-trackable configuration changes to settings that their roles have privileges to change.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Powerscale Onefs | from 9.0.0.0 through 9.2.1 Version 8.2.2 |