CVE-2024-25959CWE-532

Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability

High · published March 28, 2024

CVSS v3.1
7.9
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure, escalation of privileges.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00161 · 5.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-03-28T17:49Z
EPSS history
Timeline
  • 28 MAR 17:49Z
    Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability
    cvelistv5