Skip to content
OpenAdvisories
High · 7.8 CVE-2023-22572 EUVD-2023-26712GHSA-gv84-hwh2-8qh7

Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A l…

Published Feb 1, 2023 · Updated Mar 26, 2025 · Assigned by dell

Vendor: Dell Product: PowerScale OneFS

Description

Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS ≤ 9.1.0.0 through 9.1.0.26, ≤ 9.2.1.0 through 9.2.1.19, ≤ 9.4.0.0 through 9.4.0.10 —

References