medium6.0
CVE-2024-25952
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability.
Impact
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerscale Onefs | from 8.2.2.0 through 9.3.0 from 9.4.0 through 9.4.0.16 from 9.5.0.0 before 9.5.0.8 from 9.6.1 before 9.7.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000223366/dsa-2024-115-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000223366/dsa-2024-115-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities