CVE-2023-25941

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:50

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security - Patch, Vendor Advisory () https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security - Patch, Vendor Advisory

07 Nov 2023, 04:09

Type Values Removed Values Added
Summary Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee. Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.

Information

Published : 2023-04-04 11:15

Updated : 2024-11-21 07:50


NVD link : CVE-2023-25941

Mitre link : CVE-2023-25941

CVE.ORG link : CVE-2023-25941


JSON object : View

Products Affected

dell

  • emc_powerscale_onefs
CWE
CWE-276

Incorrect Default Permissions