Orta CVSS 4.4
CVE-2025-43724: Powerscale Onefs: güvenlik açığı
Açıklama (NVD)
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.
Özet bilgiler
- Ürün
- Dell Powerscale Onefs
- CVSS v3.1
- 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,13 (yüzdelik 2)
- CWE
- CWE-639
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dell-powerscale-onefs | 9.8.0.0 | — | 9.10.1.3 |
| dell-powerscale-onefs | 9.5.0.0 | — | 9.5.1.5 |
| dell-powerscale-onefs | 9.6.0 | — | 9.7.1.10 |
| dell-powerscale-onefs | 9.11.0.0 | — | 9.12.0.0 |