CVE-2022-45096

· MEDIUMModified

← All CVEs

CVSS v3.1

5.4

EPSS

0.49%

Published

Feb 1, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user could unintentionally lead an administrator to enable this vulnerability, leading to disclosure of information.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-355CWE-1021

Affected Products (3)

dell · emc_powerscale_onefs (up to 9.1.0.25)vulnerable

dell · emc_powerscale_onefs (up to 9.2.1.18)vulnerable

dell · emc_powerscale_onefs (up to 9.4.0.9)vulnerable

References (2)

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs