CVE-2022-22565CWE-612

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information

Medium · published April 12, 2022

CVSS v3.1
4.7
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00493 · 41.4th percentile
Weakness
CWE-612 · Improper Authorization of Index Containing Sensitive Information
Published
2022-04-12T17:50Z
EPSS history
Timeline
  • 12 APR 17:50Z
    Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information
    cvelistv5