Design/Logic Flaw

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading to a denial of service...

Design/Logic Flaw

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access...

CVE-2022-26855

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading to a denial of service...

CVE-2022-26855

Dell PowerScale OneFS (versions 8.2.x–9.3.0.x) contains an incorrect default permissions vulnerability that could allow a local attacker to cause a denial of service. The root cause is misconfigured default permissions, with a local attack vector and no authenticated access required per CVSS data...

CVE-2022-26854

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access...

CVE-2022-26854

Dell PowerScale OneFS (versions 8.2.x–9.2.x) is affected by a vulnerability described as risky cryptographic algorithms, potentially enabling a remote unprivileged attacker to gain full system access. The CVE entry notes attacker-controlled remote access with high impact. A Dell PowerScale OneFS ...

CVE-2022-26852

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise...

CVE-2022-26852

Technical details about CVE-2022-26852 are not publicly provided in the supplied connected documents. Dell PowerScale OneFS versions 8.2.x-9.3.x are mentioned in the initial description, but no additional exploit specifics, impact, or remediation are given here. Monitor for updates.

CVE-2022-26851

Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to data loss...

CVE-2022-26851

Dell PowerScale OneFS (8.2.2–9.3.x) contains a vulnerability described as a predictable file name from observable state. An unprivileged, remote attacker could exploit it to cause data loss. Affected component/condition corresponds to the observable state of file naming; the exact root cause is d...

CVE-2022-24428

Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem user with a local account could potentially exploit this vulnerability, leading to an escalation of file privileges and information disclosur...

CVE-2022-24428

Dell PowerScale OneFS (versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, 9.3.0.x) is affected by an improper preservation of privileges error. The vulnerability could be exploited by a remote filesystem user with a local account to escalate file privileges and disclose information. Root cause: ...

CVE-2022-22563

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes...

CVE-2022-22563

Dell PowerScale OneFS 8.2.x–9.2.x contains a vulnerability where sensitive information is omitted from /etc/master.passwd. A high-privileged user could exploit this to avoid recording the source of account-information changes, potentially impacting auditability and traceability. Affected componen...

Dell Technologies Dell PowerScale OneFS安全漏洞

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to not log information that identifies the source of changes to account information...

PT-2022-18103

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.2.x Description The issue concerns the use of risky cryptographic algorithms in the software, which could be exploited by a remote unprivileged malicious attacker to gain full system access...

PT-2022-15531

Name of the Vulnerable Software and Affected Versions Dell EMC Powerscale OneFS versions 8.2.x through 9.2.x Description A high-privileged user can exploit this issue to not record information identifying the source of account information changes, as security-relevant information is omitted in...

PT-2022-16689

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.3.0.x Description The issue concerns an improper preservation of privileges in Dell PowerScale OneFS. A remote filesystem user with a local account could potentially exploit this, leading to an...

PT-2022-18101

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.2 through 9.3.x Description The issue is related to a predictable file name from observable state, which could be exploited by an unprivileged network attacker, potentially leading to data loss. Recommendatio...

CVE-2022-26854: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access...