Vulnerability Description
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Powerscale Onefs | 8.1.0 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-Vendor Advisory
FAQ
What is CVE-2021-21502?
CVE-2021-21502 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired accou...
How severe is CVE-2021-21502?
CVE-2021-21502 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-21502?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Powerscale Onefs.