CVE-2023-32457
29.08.2023, 08:15
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | powerscale_onefs | 9.2.1.0 ≤ 𝑥 ≤ 9.2.1.22 |
| dell | powerscale_onefs | 9.4.0.0 ≤ 𝑥 ≤ 9.4.0.13 |
| dell | powerscale_onefs | 9.5.0.0 ≤ 𝑥 ≤ 9.5.0.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| dell | powerscale_onefs | 9.2.1.0 ≤ 𝑥 ≤ 9.2.1.22 | ADP |
| dell | powerscale_onefs | 9.4.0.0 ≤ 𝑥 ≤ 9.4.0.13 | ADP |
| dell | powerscale_onefs | 9.5.0.0 ≤ 𝑥 ≤ 9.5.0.3 | ADP |
Common Weakness Enumeration
- CWE-267 - Privilege Defined With Unsafe ActionsA particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
References