Skip to content
OpenAdvisories
Medium · 6.0 CVE-2024-25952 EUVD-2024-23254GHSA-r2p4-xrgf-rxrx

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privi…

Published Mar 28, 2024 · Updated Aug 1, 2024 · Assigned by dell

Description

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS 8.2.2 – ≤ 9.3.0.0, 9.4.0.0 – ≤ 9.4.0.16, 9.5.0.0 – ≤ 9.5.0.7, 9.6.1.0 – ≤ 9.7.0.0, 9.7.0.0 – ≤ 9.7.0.1 —

References