CVE-2022-45097

CWE-842CWE-276 — Incorrect Default Permissions3 documents3 sources
Severity
8.8HIGH
EPSS
0.3%
top 45.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell EMC Powerscale OnefsDell Powerscale Onefs
Timeline
PublishedFeb 1

Description

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this vulnerability, leading to escalation of privileges, and information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶NVDdell/emc_powerscale_onefs9.1.0.0 — 9.1.0.25+2
▶CVEListV5dell/powerscale_onefs9.0.0.x — 9.4.0.x

🔴Vulnerability Details

2
GHSA
GHSA-vh68-cv68-mvfr: Dell PowerScale OneFS 9↗2023-02-01
▶
CVEList
CVE-2022-45097: Dell PowerScale OneFS 9↗2023-02-01
▶
CVE-2022-45097 (HIGH CVSS 8.8) | Dell PowerScale OneFS 9.0.0.x-9.4.0 | cvebase.io