Lucene search
HistoryFeb 11, 2023 - 1:23 a.m.
CVE-2022-34445
dell powerscale onefs
weak password encoding
information disclosure
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0
Percentile
5.1%
Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.
Affected configurations
Node
dellpowerscale_onefsMatch8.2.0
ORdellpowerscale_onefsMatch8.2.1
ORdellpowerscale_onefsMatch8.2.2
ORdellpowerscale_onefsMatch9.0.0
ORdellpowerscale_onefsMatch9.1.0
ORdellpowerscale_onefsMatch9.1.1
ORdellpowerscale_onefsMatch9.2.0
ORdellpowerscale_onefsMatch9.2.1
ORdellpowerscale_onefsMatch9.3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | powerscale_onefs | 8.2.0 | cpe:2.3:a:dell:powerscale_onefs:8.2.0:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 8.2.1 | cpe:2.3:a:dell:powerscale_onefs:8.2.1:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 8.2.2 | cpe:2.3:a:dell:powerscale_onefs:8.2.2:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.0.0 | cpe:2.3:a:dell:powerscale_onefs:9.0.0:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.1.0 | cpe:2.3:a:dell:powerscale_onefs:9.1.0:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.1.1 | cpe:2.3:a:dell:powerscale_onefs:9.1.1:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.2.0 | cpe:2.3:a:dell:powerscale_onefs:9.2.0:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.2.1 | cpe:2.3:a:dell:powerscale_onefs:9.2.1:*:*:*:*:*:*:* |
| dell | powerscale_onefs | 9.3.0 | cpe:2.3:a:dell:powerscale_onefs:9.3.0:*:*:*:*:*:*:* |
Related
cnvd
cnvd
Dell PowerScale OneFS Encryption Issue Vulnerability (CNVD-2023-12613)
2023-02-15 00:00:00
cvelist
cvelist
CVE-2022-34445
2023-02-10 20:41:15
prion
prion
Information disclosure
2023-02-11 01:23:00
cve
cve
CVE-2022-34445
2023-02-11 01:23:24
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-34445