CVE-2022-45097: medium-severity vulnerability in Dell PowerScale OneFS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.4%
In short
Dell PowerScale OneFS has a flaw in how it manages user permissions that allows a low-privilege network attacker to gain higher-level access and view sensitive information they shouldn't be able to see.
Technical detail
CWE-842 Incorrect User Management in Dell PowerScale OneFS 9.0.0.x-9.4.0.x permits a network-based attacker with low privileges to escalate their access level and disclose restricted information through improper privilege boundary enforcement.
Summary generated and translated by AI from the official description.
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this vulnerability, leading to escalation of privileges, and information disclosure.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Dell · PowerScale OneFSRelated CVEs — Dell PowerScale OneFS
In the same product, most dangerous first.