Dell PowerScale OneFS 日志信息泄露漏洞

Dell PowerScale OneFS is a Dell PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS is vulnerable to a log information disclosure vulnerability that could be exploited by a low privilege local attacker to cause a system takeover...

CVE-2022-45100: Improper Certificate Validation

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to a full compromise of the system...

CVE-2022-45098: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information vulnerability in S3 component. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2023-22575: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user could potentially exploit this vulnerability, leading to information disclosure and escalation of privileges...

CVE-2023-22574: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and...

CVE-2022-45095: Improper Neutralization of Special Elements used in a Command

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

CVE-2022-46679: Insufficient Resource Pool

Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2022-45101: Improper Handling of Insufficient Privileges

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is a U.S. Dell Dell PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS is vulnerable to a user management error that can be exploited by low-privilege attackers to cause privilege escalation and information disclosure...

CVE-2022-45099: Weak Encoding for Password

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is an information disclosure vulnerability that can be exploited by an authenticated, local attacker to obtain sensitive information stored in plaintext...

CVE-2023-22573: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure...

PT-2023-1581 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the insertion of sensitive information into log files in cloudpool, which could be exploited by a low-privileged local attacker, leading to sensitive...

PT-2023-1585 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the insertion of sensitive information into log files in the celog component, potentially leading to information disclosure and escalation of...

The vulnerability of the PowerScale OneFS operating system, related to the disclosure of information through registration files, allows a perpetrator to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

PT-2023-1467 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.1.0.x through 9.4.0.x Description: The issue is related to the insertion of sensitive information into log files when changing passwords through the interface. A low-privilege local attacker could potentially...

PT-2023-1587 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the disclosure of sensitive information through log files in the IPMI interface of the PowerScale OneFS operating system. A low-privileged user with...

PT-2022-6375 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a command injection vulnerability. An authenticated user with access to the local shell and the privilege to gather logs from the cluster could potentiall...

PT-2022-6366 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to incorrect user management, which can be exploited by a low-privileged network attacker to escalate privileges and disclose protected information. This...

PT-2022-6374 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.0 through 9.3.0 Description: The issue is related to a security problem with the user interface of Dell PowerScale OneFS. An unauthenticated remote user could unintentionally lead an administrator to enable...