CVE-2021-21502

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.

• CWE-287

• https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilitiesVendor Advisory

Published

Feb 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21492SAP NetWeaver Application Server Java(HTTP Service), version…4.3
• CVE-2021-21493When a user opens manipulated Graphics Interchange Format (.…3.3
• CVE-2021-21494MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_aja…4.8
• CVE-2021-21495MK-AUTH through 19.01 K4.9 allows CSRF for password changes …8.8
• CVE-2021-2150Vulnerability in the Oracle iStore product of Oracle E-Busin…8.2
• CVE-2021-21501Improper configuration will cause ServiceComb ServiceCenter …7.5
• CVE-2021-21503PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper …7.8
• CVE-2021-21505Dell EMC Integrated System for Microsoft Azure Stack Hub, ve…9.8
• CVE-2021-21506PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper …8.8
• CVE-2021-21507Dell EMC Networking X-Series firmware versions prior to 3.0.…9.8
• CVE-2021-21508Dell VxRail versions before 7.0.200 contain a Plain-text Pas…6.7
• CVE-2021-2151Vulnerability in the PeopleSoft Enterprise PeopleTools produ…6.7