CVE-2023-25941CWE-276

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability

High · published April 4, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2023-04-04T10:22Z
EPSS history
Timeline
  • 04 APR 10:22Z
    Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability
    cvelistv5