CVE

CVE-2023-32490

Date: (C)2023-08-16   (M)2023-11-10

Dell PowerScale OneFS 8.2x -9.5x contains an improper privilege management vulnerability. A high privilege local attacker could potentially exploit this vulnerability, leading to system takeover.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:		CVSS V2 Severity:
CVSS Score : 6.7		CVSS Score :
Exploit Score: 0.8		Exploit Score:
Impact Score: 5.9		Impact Score:
CVSS V3 Metrics:		CVSS V2 Metrics:
Attack Vector: LOCAL		Access Vector:
Attack Complexity: LOW		Access Complexity:
Privileges Required: HIGH		Authentication:
User Interaction: NONE		Confidentiality:
Scope: UNCHANGED		Integrity:
Confidentiality: HIGH		Availability:
Integrity: HIGH
Availability: HIGH

Reference:

https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities