HIGH🇬🇧 English

CVE-2023-25941

CVSS 7.8v3.1pub. 2023-04-04upd. 2024-11-21

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Dell Emc Powerscale Onefs

    OS
    Dell
    9.1.0.0 – 9.1.0.289.2.1.0 – 9.2.1.22 (bez)9.4.0.0 – 9.4.0.13 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2022-26851CRITICAL9.1ten sam produkt

Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An u...

CVE-2021-21502CRITICAL9.8ten sam produkt

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability....

CVE-2022-33934HIGH7.7ten sam produkt

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilit...

CVE-2022-45099HIGH7.8ten sam produkt

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and pri...

CVE-2022-45100HIGH8.1ten sam produkt

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An re...