Improper Privilege Management in Dell PowerScale OneFS
CVE-2024-37126

6.7MEDIUM

Key Information:

Vendor

Dell
Status
Powerscale Onefs
Vendor
CVE Published:
2 July 2024

What is CVE-2024-37126?

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 are affected by an improper privilege management vulnerability. This flaw could be exploited by a local attacker with high privileges, potentially allowing them to gain unauthorized root-level access to the system. It is essential for users of the affected versions to apply the necessary security updates to mitigate this risk and protect their data environments.

References

https://www.dell.com/support/kbdoc/en-us/000226569/dsa-20...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.