CVE-2022-31229CWE-209

Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information

Critical · published June 28, 2022

CVSS v3.1
9.6
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

🚨 Sensitive data leakage on Dell PowerScale OneFS could hand attackers a backstage pass to your resources! 🔥 Think of it like a hotel receptionist accidentally revealing the room numbers of VIP guests during a check-in conversation—it's a totally avoidable blunder that could lead to some serious privacy infringements. An attacker could potentially gain access to sensitive information that opens the door to unauthorized access. This could lead to data breaches, compromising your organization's security, and even exposing critical resources to malicious actors. The consequences could be absolutely devastating!

Put simply

Think of it like a hotel receptionist accidentally revealing the room numbers of VIP guests during a check-in conversation—it's a totally avoidable blunder that could lead to some serious privacy infringements. The vulnerability stems from error messages that disclose sensitive information, making it easier for an attacker to gain access to restricted resources. It affects Dell PowerScale OneFS versions 8.2.x through 9.3.0.x.

What to do

An attacker could potentially gain access to sensitive information that opens the door to unauthorized access. This could lead to data breaches, compromising your organization's security, and even exposing critical resources to malicious actors. The consequences could be absolutely devastating! Immediately update Dell PowerScale OneFS to the latest version to prevent this information disclosure. Review and tighten your error handling configurations to avoid revealing sensitive information in error messages. Keep an eye on security updates to stay protected! You've got this! By taking these steps, you’ll strengthen your defenses and protect your sensitive data! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2022-06-28T18:40Z
EPSS history
Timeline
  • 28 JUN 18:40Z
    Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information
    cvelistv5