Design/Logic Flaw

2023-02-0113:15:00

PRIOn knowledge base

www.prio-n.com

dell powerscale

vulnerability

change password api

local attacker

exploitation

system takeover

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.

CPENameOperatorVersion
emc_powerscale_onefsge9.4.0.0
emc_powerscale_onefslt9.4.0.11
emc_powerscale_onefsge9.2.1.0
emc_powerscale_onefslt9.2.1.20
emc_powerscale_onefsge9.1.0.0
emc_powerscale_onefslt9.1.0.27

Name	Operator	Version
emc_powerscale_onefs	ge	9.4.0.0
emc_powerscale_onefs	lt	9.4.0.11
emc_powerscale_onefs	ge	9.2.1.0
emc_powerscale_onefs	lt	9.2.1.20
emc_powerscale_onefs	ge	9.1.0.0
emc_powerscale_onefs	lt	9.1.0.27