CVE-2023-32488: medium-severity vulnerability in Dell PowerScale OneFS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.4%
In short
Dell PowerScale OneFS versions 8.2 through 9.5 have a flaw in its NFS (Network File System) service that could allow a user with basic access to read sensitive information they shouldn't be able to access.
Technical detail
An information disclosure vulnerability exists in the NFS implementation of Dell PowerScale OneFS 8.2.x-9.5.0.x that permits a low-privileged attacker to access confidential data. The vulnerability requires NFS client access and improper permission enforcement enables unauthorized information exposure.
Summary generated and translated by AI from the official description.
Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Dell · PowerScale OneFSRelated CVEs — Dell PowerScale OneFS
In the same product, most dangerous first.