Authorization Bypass in Dell PowerScale OneFS Affects User Shares

CVE-2025-43724

What is CVE-2025-43724?

Dell PowerScale OneFS is susceptible to an authorization bypass due to inadequate controls on user-defined keys. This vulnerability could allow high-privileged attackers with local access to exploit the system and gain unauthorized access to sensitive NFSv4 or SMB shares. Users are advised to upgrade to version 9.12.0.0 or later to mitigate the risk associated with this vulnerability.

References