SSH Process Flaw in Dell Isilon OneFS Affects Remote Support Access

CVE-2020-5355

What is CVE-2020-5355?

The Dell Isilon OneFS versions prior to 8.2.2 contain an improper access control vulnerability in the SSHD process. This flaw allows the remotesupport user and other users with restricted shells to gain unauthorized access through Transmission Control Protocol (TCP) and stream forwarding. As a result, the functionality intended for limited access may be exploited, potentially compromising the security posture of systems utilizing these affected versions.

References