high7.8
CVE-2023-22572
Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api.
Impact
Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Powerscale Onefs | from 9.1.0.0 before 9.1.0.27 from 9.2.1.0 before 9.2.1.20 from 9.4.0.0 before 9.4.0.11 |