PT-2023-20375 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB,...

PT-2023-20373 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS version 9.5.0.0 Description: The issue is related to improper link resolution before file access in the isi gather info function. A local attacker, potentially with low privileges, could exploit this, leading to system...

CVE-2023-25942: Improper Control of a Resource Through its Lifetime

Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service...

PT-2023-20374

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.5.0.x Description A low-privileged local attacker could potentially exploit this issue, leading to denial of service, escalation of privileges, and information disclosure. This vulnerability break...

CVE-2023-25940: Improper Link Resolution Before File Access

Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isigatherinfo. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees...

The vulnerability of the PowerScale OneFS operating system, related to the lack of measures for cleaning input data, allows a perpetrator to execute arbitrary commands, expose sensitive information, or cause service failures.

The vulnerability of the PowerScale OneFS operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands, expose protected information, or cause service failures...

Vulnerability of the network file system (NFS) of PowerScale OneFS operating systems, which allows a intruder to gain unauthorized access to protected information or execute arbitrary code

The vulnerability of the network file system NFS in PowerScale OneFS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

The vulnerability of the event log journal of the CELOG cluster operating system PowerScale OneFS, which allows a intruder to disclose protected information

The vulnerability of the CELOG event log journal of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the IPMI interface of the PowerScale OneFS operating system, which allows a hacker to disclose protected information

The vulnerability of the IPMI interface of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the S3 component in PowerScale OneFS operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the S3 component in PowerScale OneFS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the PowerScale OneFS operating system, related to the disclosure of information through registration files, allows a perpetrator to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the PowerScale OneFS operating system, related to user being assigned to an inappropriate group, allows attackers to escalate their privileges and expose sensitive information.

The vulnerability of the PowerScale OneFS operating system is related to the user being assigned to an inappropriate group. Exploiting this vulnerability allows a malicious actor to increase their privileges and expose sensitive information...

The vulnerability of the PowerScale OneFS operating system, related to deficiencies in user interface security, allows attackers to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to security flaws in the user interface. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose sensitive information that is protected by the system...

Dell PowerScale OneFS Information Disclosure Vulnerability (CNVD-2023-65223)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from an information disclosure vulnerability that originates when a program exposes sensitive information to unauthorized actors,...

CVE-2023-25536

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...

CVE-2023-25536

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...

Code injection

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...

CVE-2023-25536

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...

CVE-2023-25536

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...

CVE-2023-25536

CVE-2023-25536 affects Dell PowerScale OneFS 9.4.0.x. The vulnerability is an information disclosure where an authenticated local user could exploit certificate management to obtain sensitive data, potentially leading to a system takeover. The CVSS vector (LOCAL, HIGH privileges, no user interact...