CVE-2022-24428

published 2022-04-08

CVE-2022-24428: Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem user with a local account could potentially exploit this vulnerability, leading to an escalation of file privileges and information disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	emc_powerscale_onefs	8.2.0 – 9.3.0.0	—
dell	powerscale_onefs	>= unspecified < 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, 9.3.0.x	8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, 9.3.0.x

CWE-281