Description
Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability to access the cluster with previous privileges of a disabled user account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | PowerScale OneFS | 9.4.0.0 – ≤ 9.10.0.1, 9.7.0.0 – ≤ 9.7.1.4 | — |
Advisories 1
- WID-SEC-2025-0725 Dell PowerScale OneFS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 7, 2025