Lucene search
HistoryAug 22, 2022 - 5:15 p.m.
CVE-2022-31237
dell powerscale onefs
synciq vulnerability
information disclosure
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
5.1%
Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permissions vulnerability in SyncIQ. A low privileged local attacker may potentially exploit this vulnerability, leading to limited information disclosure.
Affected configurations
Node
dellemc_powerscale_onefsRange9.2.0–9.2.1.12
ORdellemc_powerscale_onefsRange9.3.0.0–9.3.0.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | emc_powerscale_onefs | * | cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-31237
2022-08-22 16:50:12
prion
prion
Information disclosure
2022-08-22 17:15:00
cve
cve
CVE-2022-31237
2022-08-22 17:15:08
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-31237