CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2022-34371
https://notcve.org/view.php?id=CVE-2022-34371
02 Sep 2022 — Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise. Dell PowerScale OneFS, versiones 9.0.0 hasta 9.1.0.19, 9.2.1.12, 9.3.0.6 y 9.4.0.3 incluyéndola, contienen una vulnerabilidad de transporte de credenciales sin protección. Un atacante malicioso no privilegiado en la red podría... • https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities • CWE-522: Insufficiently Protected Credentials •
CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2022-34369
https://notcve.org/view.php?id=CVE-2022-34369
02 Sep 2022 — Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to exposure of this sensitive data. Dell PowerScale OneFS, versiones 9.0.0 hasta 9.1.0.20, 9.2.1.13, 9.3.0.6 y 9.4.0.3 incluyéndola, contienen una vulnerabilidad de inserción de información confidencial en archivos de registro. Un atacante remoto no pr... • https://www.dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2022-33932
https://notcve.org/view.php?id=CVE-2022-33932
22 Aug 2022 — Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated network malicious attacker may potentially exploit this vulnerability, leading to a denial of filesystem services. Dell PowerScale OneFS, versiones 9.0.0 hasta 9.1.0.19, 9.2.1.12, 9.3.0.6 y 9.4.0.2 incluyéndola, contienen una vulnerabilidad de canal primario no protegido. Un atacante malintencionado no autenticado en la red puede explota... • https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en • CWE-419: Unprotected Primary Channel •
CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-32480
https://notcve.org/view.php?id=CVE-2022-32480
22 Aug 2022 — Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an insecure default initialization of a resource vulnerability. A remote authenticated attacker may potentially exploit this vulnerability, leading to information disclosure. Dell PowerScale OneFS, versiones 9.0.0, hasta 9.1.0.19, 9.2.1.12, 9.3.0.6 y 9.4.0.2 incluyéndola, contienen una vulnerabilidad de inicialización por defecto de un recurso. Un atacante remoto autenticado puede potencialmente expl... • https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en • CWE-1188: Initialization of a Resource with an Insecure Default •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2022-31238
https://notcve.org/view.php?id=CVE-2022-31238
22 Aug 2022 — Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure. Dell PowerScale OneFS, versiones 9.0.0 hasta 9.1.0.19, 9.2.1.12, 9.3.0.6, y 9.4.0.2 incluyéndola, contienen una vulnerabilidad de proceso invocado con información confidencial. Un usuario de la CLI puede explotar potencialmente esta vulnerabilidad, conll... • https://www.dell.com/support/kbdoc/en-gh/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2022-31237
https://notcve.org/view.php?id=CVE-2022-31237
22 Aug 2022 — Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permissions vulnerability in SyncIQ. A low privileged local attacker may potentially exploit this vulnerability, leading to limited information disclosure. Dell PowerScale OneFS, versiones 9.2.0 hasta 9.2.1.12 y 9.3.0.5 incluyéndola, contienen una vulnerabilidad de conservación inapropiada de permisos en SyncIQ. Un atacante local poco privilegiado podría explotar esta vulnerabilidad, conllevand... • https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en • CWE-281: Improper Preservation of Permissions •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-31230
https://notcve.org/view.php?id=CVE-2022-31230
28 Jun 2022 — Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access. Dell PowerScale OneFS, versiones 8.2.x-9.2.x, contienen un algoritmo criptográfico roto o arriesgado. Un atacante remoto malicioso no privilegiado podría explotar esta vulnerabilidad, conllevando a un acceso total del sistema • https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 9.6EPSS: 0%CPEs: 1EXPL: 0CVE-2022-31229
https://notcve.org/view.php?id=CVE-2022-31229
28 Jun 2022 — Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator could potentially exploit this vulnerability, leading to disclosure of sensitive information. This sensitive information can be used to access sensitive resources. Dell PowerScale OneFS, versiones 8.2.x hasta 9.3.0.x, contienen un mensaje de error con información confidencial. Un administrador podría explotar esta vulnerabilidad, conllevando a una divulgación de información confidencial. • https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update?lang=en • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 8.1EPSS: 0%CPEs: 6EXPL: 0CVE-2022-29098
https://notcve.org/view.php?id=CVE-2022-29098
01 Jun 2022 — Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise. Dell PowerScale OneFS versiones 8.2.0.x a 9.3.0.x, contienen una vulnerabilidad de requisito de contraseña débil. Un administrador puede crear una cuenta sin contraseña. • https://www.dell.com/support/kbdoc/en-us/000200128/dsa-2022-082-dell-emc-powerscale-onefs-security-update?lang=en • CWE-521: Weak Password Requirements •
CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-24413
https://notcve.org/view.php?id=CVE-2022-24413
12 Apr 2022 — Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss. Dell PowerScale OneFS, versiones 8.2.2-9.3.x, contienen una vulnerabilidad de tiempo de comprobación a tiempo de uso. Un usuario local con acceso al sistema de archivos podría explotar esta vulnerabilidad, conllevando a una pérdida de datos • https://www.dell.com/support/kbdoc/000196657 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •