Dell PowerScale OneFS security vulnerabilities

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to bypass schema protection and gain elevated...

PT-2023-23822 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2x through 9.5x Description: A local attacker with high privileges could potentially exploit this issue to bypass mode protections and gain elevated privileges. The issue is related to a privilege escalation...

CVE-2023-32491: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file vulnerability in SNMPv3. A low privileges user could potentially exploit this vulnerability, leading to information disclosure...

PT-2023-23829

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.5.x Description The issue concerns exposure of sensitive information to an unauthorized actor. An authorized local attacker could potentially exploit this, leading to escalation of privileges...

PT-2023-23827

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.5.0.x Description The issue allows an unprivileged, remote attacker to potentially exploit a protection mechanism bypass, leading to denial of service, information disclosure, and remote execution...

CVE-2023-32489: Improper Handling of Insufficient Permissions or Privileges

Dell PowerScale OneFS 8.2x -9.5x contains a privilege escalation vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, to bypass mode protections and gain elevated privileges...

CVE-2023-32486: Execution with Unnecessary Privileges

Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low privilege local attacker could potentially exploit this vulnerability, leading to escalation of privileges...

CVE-2023-32490: Improper Privilege Management

Dell PowerScale OneFS 8.2x -9.5x contains an improper privilege management vulnerability. A high privilege local attacker could potentially exploit this vulnerability, leading to system takeover...

PT-2023-23828 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.0.x through 9.5.x Description: The issue is related to an improper handling of insufficient privileges, which could be exploited by a local privileged attacker to elevate privileges. This vulnerability also...

PT-2023-23825 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS version 9.5.0.x Description: The issue concerns an insertion of sensitive information into log files, specifically related to SNMPv3. A user with low privileges could potentially exploit this, leading to information...

PT-2023-23821 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.5.0.x Description: The issue is an information disclosure vulnerability in the NFS component. A low-privileged attacker could potentially exploit this, leading to information disclosure...

CVE-2023-32493: Protection Mechanism Failure

Dell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. An unprivileged, remote attacker could potentially exploit this vulnerability, leading to denial of service, information disclosure and remote execution...

CVE-2023-32494: Improper Handling of Insufficient Privileges

Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges vulnerability. A local privileged attacker could potentially exploit this vulnerability, leading to elevation of privilege and affect in compliance mode also...

Dell PowerScale OneFS security vulnerabilities

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to cause an escalation of privilege...

PT-2023-23819 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.5.x Description: A low privilege local attacker could potentially exploit a privilege escalation issue, leading to escalation of privileges. Recommendations: For Dell PowerScale OneFS versions 9.5.x, at the...

CVE-2023-32492: Incorrect Default Permissions

Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to information disclosure or allowing to modify files...

PT-2023-23824

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2x through 9.5x Description The issue is related to improper privilege management, which could be exploited by a high privilege local attacker, potentially leading to system takeover. Recommendations For versio...

CVE-2023-32487: Improper Privilege Management

Dell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevation of privilege vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to denial of service, code execution and information disclosure...

PT-2023-23826 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS version 9.5.0.x Description: The issue is related to incorrect default permissions, which could be exploited by a low-privileged local attacker. This could lead to information disclosure or allow the attacker to modify...

Dell PowerScale OneFS log information leakage vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a log information disclosure vulnerability that originates from writing sensitive information to SNMPv3 log files. An attacker could...