CVE-2022-45096

CWE-355CWE-1021 — Clickjacking3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.7%
top 28.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell EMC Powerscale OnefsDell Powerscale Onefs
Timeline
PublishedFeb 1

Description

Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user could unintentionally lead an administrator to enable this vulnerability, leading to disclosure of information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

▶NVDdell/emc_powerscale_onefs9.1.0.0 — 9.1.0.25+2
▶CVEListV5dell/powerscale_onefs8.2.0 — 9.3.0

🔴Vulnerability Details

2
CVEList
CVE-2022-45096: Dell PowerScale OneFS, 8↗2023-02-01
▶
GHSA
GHSA-9m8v-j7x9-f6g6: Dell PowerScale OneFS, 8↗2023-02-01
▶
CVE-2022-45096 (MEDIUM CVSS 6.5) | Dell PowerScale OneFS | cvebase.io