CVE-2022-22563CWE-223

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd

Medium · published April 8, 2022

CVSS v3.1
4.4
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-223 · Omission of Security-relevant Information
Published
2022-04-08T19:50Z
EPSS history
Timeline
  • 08 APR 19:50Z
    Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd
    cvelistv5