Code injection

2022-09-0218:15:00

PRIOn knowledge base

www.prio-n.com

code injection

dell powerscale onefs

versions 9.0.0

9.1.0.20

9.2.1.13

9.3.0.6

9.4.0.3

sensitive information

log files

remote attacker

unprivileged.

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to exposure of this sensitive data.

CPENameOperatorVersion
emc_powerscale_onefsge9.3.0.0
emc_powerscale_onefsle9.3.0.6
emc_powerscale_onefsge9.1.0.0
emc_powerscale_onefsle9.1.0.20
emc_powerscale_onefsge9.2.1.0
emc_powerscale_onefsle9.2.1.13
emc_powerscale_onefsge9.4.0.0
emc_powerscale_onefsle9.4.0.3

Name	Operator	Version
emc_powerscale_onefs	ge	9.3.0.0
emc_powerscale_onefs	le	9.3.0.6
emc_powerscale_onefs	ge	9.1.0.0
emc_powerscale_onefs	le	9.1.0.20
emc_powerscale_onefs	ge	9.2.1.0
emc_powerscale_onefs	le	9.2.1.13
emc_powerscale_onefs	ge	9.4.0.0
emc_powerscale_onefs	le	9.4.0.3