Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure.
References
Link | Resource |
---|---|
https://www.dell.com/support/kbdoc/en-gh/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:21
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-200 |
24 Aug 2022, 14:49
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:* | |
First Time |
Dell
Dell emc Powerscale Onefs |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CWE | CWE-668 | |
References | (MISC) https://www.dell.com/support/kbdoc/en-gh/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update - Vendor Advisory |
22 Aug 2022, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-22 17:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-31238
Mitre link : CVE-2022-31238
CVE.ORG link : CVE-2022-31238
JSON object : View
Products Affected
dell
- emc_powerscale_onefs
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor