CVE-2023-43087 — Improper Handling of Insufficient Permissions or Privileges in Dell Powerscale Onefs

CWE-280 — Improper Handling of Insufficient Permissions or PrivilegesCWE-755 — Improper Handling of Exceptional Conditions3 documents3 sources
Severity
6.5MEDIUMNVD
CNA4.3
EPSS
0.1%
top 68.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Powerscale Onefs
Timeline
PublishedNov 2

Description

Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exploit this vulnerability to cause information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDdell/powerscale_onefs9.2.1 — 9.2.1.24+3
▶CVEListV5dell/powerscale_onefsVersion 9.2.1.0 through 9.2.1.23

🔴Vulnerability Details

2
CVEList
CVE-2023-43087: Dell PowerScale OneFS 8↗2023-11-02
▶
GHSA
GHSA-4x26-g7hr-m7g8: Dell PowerScale OneFS 8↗2023-11-02
▶
CVE-2023-43087 — Dell Powerscale Onefs vulnerability | cvebase