CVE-2022-22549CWE-295

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation

High · published April 12, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2022-04-12T17:50Z
EPSS history
Timeline
  • 12 APR 17:50Z
    Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation
    cvelistv5