Vulnerabilities > CVE-2022-22565 - Unspecified vulnerability in Dell EMC Powerscale Onefs

CVSS 3.8 - LOW

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

dell

NVD

Published: 2022-04-12

Updated: 2022-04-20

Summary

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data.

Vulnerable Configurations

Part	Description	Count
OS	Dell Dell EMC Powerscale Onefs 8.2.0 Dell EMC Powerscale Onefs 8.2.1 Dell EMC Powerscale Onefs 8.2.2 Dell EMC Powerscale Onefs 9.0.0 Dell EMC Powerscale Onefs 9.0.0.0 Dell EMC Powerscale Onefs 9.1.0 Dell EMC Powerscale Onefs 9.1.0.0 Dell EMC Powerscale Onefs 9.1.0.21 Dell EMC Powerscale Onefs 9.1.0.24 Dell EMC Powerscale Onefs 9.1.0.25 Dell EMC Powerscale Onefs 9.1.0.26 Dell EMC Powerscale Onefs 9.1.0.27 Dell EMC Powerscale Onefs 9.1.1.0 Dell EMC Powerscale Onefs 9.1.1.1 Dell EMC Powerscale Onefs 9.2.0 Dell EMC Powerscale Onefs 9.2.0.0 Dell EMC Powerscale Onefs 9.2.1.0 Dell EMC Powerscale Onefs 9.2.1.17 Dell EMC Powerscale Onefs 9.2.1.18 Dell EMC Powerscale Onefs 9.2.1.19 Dell EMC Powerscale Onefs 9.2.1.20 Dell EMC Powerscale Onefs 9.3.0	22

References

https://www.dell.com/support/kbdoc/000195815