CVE-2022-26852
08.04.2022, 20:15
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise.
| Vendor | Product | Version |
|---|---|---|
| dell | emc_powerscale_onefs | 8.2.0 ≤ 𝑥 ≤ 9.3.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-337 - Predictable Seed in Pseudo-Random Number Generator (PRNG)A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.
- CWE-335 - Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)The software uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.