Ga naar hoofdinhoud
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.

Artikelnummer: 000191604


DSA-2021-172: Dell Isilon InsightIQ Security Update for a Proprietary Component Vulnerability

Samenvatting: Dell Isilon InsightIQ remediation is available for Proprietary Component that could be exploited by malicious users to compromise the affected systems.

Article content


Impact

High

Gegevens

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-36298 Dell Isilon InsightIQ, versions prior to 4.1.4, contain Risky Cryptographic Algorithm in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; Dell recommends customers to upgrade at the earliest opportunity. 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-36298 Dell Isilon InsightIQ, versions prior to 4.1.4, contain Risky Cryptographic Algorithm in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; Dell recommends customers to upgrade at the earliest opportunity. 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2021-36298 Isilon InsightIQ 4.1.3.88 4.1.4.57
 
https://www.dell.com/support/home/en-in/product-support/product/isilon-insightiq/drivers
Select Version 4.1.4 and Package based on requirement.
  1. Isilon InsightIQ 4.1.4 Installation File for Linux Computers
  2. Isilon InsightIQ 4.1.4 Installation File for Other Supported VMware Products
  3. Isilon InsightIQ 4.1.4 Installation File for VMware ESX, VMware ESXi, or VMware Workstation
  4. Isilon InsightIQ 4.1.4 Patch file for Linux computers
CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2021-36298 Isilon InsightIQ 4.1.3.88 4.1.4.57
 
https://www.dell.com/support/home/en-in/product-support/product/isilon-insightiq/drivers
Select Version 4.1.4 and Package based on requirement.
  1. Isilon InsightIQ 4.1.4 Installation File for Linux Computers
  2. Isilon InsightIQ 4.1.4 Installation File for Other Supported VMware Products
  3. Isilon InsightIQ 4.1.4 Installation File for VMware ESX, VMware ESXi, or VMware Workstation
  4. Isilon InsightIQ 4.1.4 Patch file for Linux computers

Tijdelijke oplossingen en beperkingen

None

Revisiegeschiedenis

RevisionDateDescription
0.12021-09-17Initial Release.

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide


Artikeleigenschappen


Getroffen product

Product Security Information

Datum laatst gepubliceerd

17 sep 2021

Versie

1

Artikeltype

Dell Security Advisory