Lucene search
HistoryFeb 01, 2023 - 5:15 a.m.
CVE-2022-45097
dell
powerscale
onefs
cve-2022-45097
vulnerability
user management
privilege escalation
information disclosure
nvd
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
33.0%
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this vulnerability, leading to escalation of privileges, and information disclosure.
Affected configurations
Node
dellpowerscale_onefsRange≤9.4.0.0
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "PowerScale OneFS",
"vendor": "Dell",
"versions": [
{
"lessThanOrEqual": "9.4.0.x",
"status": "affected",
"version": "9.0.0.x",
"versionType": "custom"
}
]
}
]Related
prion
prion
Information disclosure
2023-02-01 05:15:00
cnvd
cnvd
Dell PowerScale OneFS User Management Error Vulnerability
2023-02-06 00:00:00
nvd
nvd
CVE-2022-45097
2023-02-01 05:15:12
cvelist
cvelist
CVE-2022-45097
2023-02-01 04:50:04
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
33.0%
Related for CVE-2022-45097