Page 6 of 57 results (0.004 seconds)

CVSS: 9.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-31229

https://notcve.org/view.php?id=CVE-2022-31229

28 Jun 2022 — Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator could potentially exploit this vulnerability, leading to disclosure of sensitive information. This sensitive information can be used to access sensitive resources. Dell PowerScale OneFS, versiones 8.2.x hasta 9.3.0.x, contienen un mensaje de error con información confidencial. Un administrador podría explotar esta vulnerabilidad, conllevando a una divulgación de información confidencial. • https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update?lang=en • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 8.1EPSS: 0%CPEs: 6EXPL: 0

CVE-2022-29098

https://notcve.org/view.php?id=CVE-2022-29098

01 Jun 2022 — Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise. Dell PowerScale OneFS versiones 8.2.0.x a 9.3.0.x, contienen una vulnerabilidad de requisito de contraseña débil. Un administrador puede crear una cuenta sin contraseña. • https://www.dell.com/support/kbdoc/en-us/000200128/dsa-2022-082-dell-emc-powerscale-onefs-security-update?lang=en • CWE-521: Weak Password Requirements •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-36350

https://notcve.org/view.php?id=CVE-2021-36350

21 Dec 2021 — Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors. A remote unauthenticated attacker may potentially exploit this vulnerability and bypass one of the factors of authentication. Dell PowerScale OneFS, versiones 8.2.2-9.3.0.x, contienen una omisión de autenticación por debilidad primaria en uno de los factores de autenticación. Un atacante remoto no autenticado puede explotar potencialmente esta vulnerabilidad y omitir uno ... • https://www.dell.com/support/kbdoc/000194157 • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-21567

https://notcve.org/view.php?id=CVE-2021-21567

10 Aug 2021 — Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE to elevate privilege. Dell PowerScale OneFS versiones 9.1.0.x, contiene una vulnerabilidad de administración de privilegios inapropiada. Puede permitir a un usuario autenticado con las funciones ISI_PRIV_LOGIN_SSH y/o ISI_PRIV_LOGIN_CONSOLE elevar sus privilegios • https://www.dell.com/support/kbdoc/000189495 • CWE-269: Improper Privilege Management CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-21565

https://notcve.org/view.php?id=CVE-2021-21565

02 Aug 2021 — Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses. Dell PowerScale OneFS versiones 9.1.0.3 y anteriores contienen una vulnerabilidad de denegación de servicio. SmartConnect presentaba una condición de error que puede ser desencadenada en bucle, usando CPU y potencialmente previniendo otras respuestas de SmartConnect DNS • https://www.dell.com/support/kbdoc/000188148 • CWE-400: Uncontrolled Resource Consumption CWE-834: Excessive Iteration •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-21553

https://notcve.org/view.php?id=CVE-2021-21553

02 Aug 2021 — Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest. Dell PowerScale OneFS versiones 8.1.0-9.1.0, contienen una vulnerabilidad de Administración de Usuarios Incorrecta. En algunas condiciones específicas, esto puede permitir a un usuario de CompAdmin elevar privilegios... • https://www.dell.com/support/kbdoc/000188148 • CWE-286: Incorrect User Management •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-21526

https://notcve.org/view.php?id=CVE-2021-21526

20 Apr 2021 — Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root. Dell PowerScale OneFS versiones 8.1.0 - 9.1.0, contiene una escalada de privilegios en el modo de cumplimiento de SmartLock que puede permitir a compadmin ejecutar comandos arbitrarios como root • https://www.dell.com/support/kbdoc/000185202 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •