Vulnerabilities > CVE-2022-22563 - Unspecified vulnerability in Dell EMC Powerscale Onefs

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

local

low complexity

dell

NVD

Published: 2022-04-08

Updated: 2022-04-14

Summary

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.

Vulnerable Configurations

Part	Description	Count
OS	Dell Dell EMC Powerscale Onefs 8.2.0 Dell EMC Powerscale Onefs 8.2.1 Dell EMC Powerscale Onefs 8.2.2 Dell EMC Powerscale Onefs 9.0.0 Dell EMC Powerscale Onefs 9.0.0.0 Dell EMC Powerscale Onefs 9.1.0 Dell EMC Powerscale Onefs 9.1.0.0 Dell EMC Powerscale Onefs 9.1.1.0 Dell EMC Powerscale Onefs 9.2.0 Dell EMC Powerscale Onefs 9.2.0.0 Dell EMC Powerscale Onefs 9.2.1.0	11

References

https://www.dell.com/support/kbdoc/000196657
https://www.dell.com/support/kbdoc/en-an/000197991/dell-emc-powerscale-onefs-security-update-for-multiple-component-vulnerabilities