Lucene search
HistoryAug 22, 2022 - 5:15 p.m.
CVE-2022-32480
dell powerscale
onefs
vulnerability
information disclosure
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an insecure default initialization of a resource vulnerability. A remote authenticated attacker may potentially exploit this vulnerability, leading to information disclosure.
Affected configurations
Node
dellemc_powerscale_onefsRange9.1.0.0–9.1.0.19
ORdellemc_powerscale_onefsRange9.2.1.0–9.2.1.12
ORdellemc_powerscale_onefsRange9.3.0.0–9.3.0.6
ORdellemc_powerscale_onefsRange9.4.0.0–9.4.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | emc_powerscale_onefs | * | cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-32480
2022-08-22 16:50:55
cve
cve
CVE-2022-32480
2022-08-22 17:15:08
prion
prion
Information disclosure
2022-08-22 17:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Related for NVD:CVE-2022-32480