Lucene search

K
nvd[email protected]NVD:CVE-2024-25965
HistoryMay 14, 2024 - 4:16 p.m.

CVE-2024-25965

2024-05-1416:16:14
CWE-73
web.nvd.nist.gov
4
dell powerscale
onefs
file path vulnerability
denial of service

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

EPSS

0

Percentile

9.0%

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service.

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-25965