Code injection

2022-10-2118:15:00

PRIOn knowledge base

www.prio-n.com

code injection

dell powerscale onefs

privilege escalation

vulnerability

compliance mode

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters.

CPENameOperatorVersion
emc_powerscale_onefsge9.2.1.0
emc_powerscale_onefsle9.2.1.15
emc_powerscale_onefsge9.3.0.0
emc_powerscale_onefsle9.3.0.7
emc_powerscale_onefsge9.4.0.0
emc_powerscale_onefsle9.4.0.5
emc_powerscale_onefsge9.1.0.0
emc_powerscale_onefsle9.1.0.22

Name	Operator	Version
emc_powerscale_onefs	ge	9.2.1.0
emc_powerscale_onefs	le	9.2.1.15
emc_powerscale_onefs	ge	9.3.0.0
emc_powerscale_onefs	le	9.3.0.7
emc_powerscale_onefs	ge	9.4.0.0
emc_powerscale_onefs	le	9.4.0.5
emc_powerscale_onefs	ge	9.1.0.0
emc_powerscale_onefs	le	9.1.0.22