CVE-2025-26330CWE-863

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability

High · published April 10, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability to access the cluster with previous privileges of a disabled user account.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-04-10T02:10Z
EPSS history
Timeline
  • 10 APR 02:10Z
    Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability
    cvelistv5