CVE-2023-32488 — Exposure of Sensitive Information Through Metadata in Dell Powerscale Onefs

CWE-1230 — Exposure of Sensitive Information Through Metadata3 documents3 sources
Severity
4.3MEDIUMNVD
CNA5.3
EPSS
0.2%
top 62.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Powerscale Onefs
Timeline
PublishedAug 16

Description

Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDdell/powerscale_onefs9.2.1.0 — 9.2.1.22+2
▶CVEListV5dell/powerscale_onefsVersion 9.2.1.0 through 9.2.1.22, Version 9.4.0.0 through 9.4.0.13, Version 9.5.0.0 through 9.5.0.3

🔴Vulnerability Details

2
CVEList
CVE-2023-32488: Dell PowerScale OneFS, 8↗2023-08-16
▶
GHSA
GHSA-4x52-w829-4qvm: Dell PowerScale OneFS, 8↗2023-08-16
▶
CVE-2023-32488 — Dell Powerscale Onefs vulnerability | cvebase