PT-2022-22153 · Dell · Dell Powerscale Onefs

Published 2022-09-02 · Updated 2022-09-08 · CVE-2022-34378

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.20 Dell PowerScale OneFS version 9.2.1.13 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3

Description A relative path traversal issue exists, allowing a low privileged local attacker to potentially exploit this, leading to denial of service.

Recommendations For version 9.0.0 up to and including 9.1.0.20, update to a version later than 9.1.0.20 to resolve the issue. For version 9.2.1.13, update to a version later than 9.2.1.13 to resolve the issue. For version 9.3.0.6, update to a version later than 9.3.0.6 to resolve the issue. For version 9.4.0.3, update to a version later than 9.4.0.3 to resolve the issue.

Fix

Path traversal

Relative Path Traversal

Weakness Enumeration

CWE-22

CWE-23

Related Identifiers

CVE-2022-34378

Affected Products

Dell Powerscale Onefs

References · 5

• https://dell.com/support/kbdoc/en-us/000202171/dsa-2022-172-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34378 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34378 · Vendor Advisory
• https://t.me/cibsecurity/49258 · Telegram Post
• https://t.me/cvenotify/35649 · Telegram Post