Unauthorized Access Vulnerability in Dell EMC Isilon OneFS SyncIQ Feature

CVE-2020-5328

What is CVE-2020-5328?

Dell EMC Isilon OneFS versions prior to 8.2.0 are susceptible to an unauthorized access issue stemming from inadequate authorization checks within the SyncIQ feature. Specifically, this vulnerability arises when encrypted syncs are not set as mandatory, potentially allowing an attacker to gain control over the cluster. Organizations using affected versions should evaluate their security posture and apply the necessary updates to mitigate the risk of unauthorized access.

References