CVE-2022-45101
01.02.2023, 05:15
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | emc_powerscale_onefs | 9.1.0.0 ≤ 𝑥 < 9.1.0.25 |
| dell | emc_powerscale_onefs | 9.2.1.0 ≤ 𝑥 < 9.2.1.18 |
| dell | emc_powerscale_onefs | 9.4.0.0 ≤ 𝑥 < 9.4.0.9 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| dell | powerscale_onefs | 9.0.0.0 ≤ | CNA |
Common Weakness Enumeration
- CWE-274 - Improper Handling of Insufficient PrivilegesThe software does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.