VULNERABILITY INTELLIGENCE

CVE-2020-5355

CVSS score4.3 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2022-10-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding. This provides the remotesupport user and users with restricted shells more access than is intended.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references