PT-2024-6028 · Dell · Powerscale Onefs

Published 2024-06-26 · Updated 2024-09-03 · CVE-2024-39579

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0

Description The issue is related to an incorrect privilege assignment in the PowerScale OneFS operating system. This could allow a local high-privileged attacker to potentially exploit the issue and gain root-level access.

Recommendations For Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0, update to a version that contains the fix for the incorrect privilege assignment vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2024-06838

CVE-2024-39579

Affected Products

Powerscale Onefs

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-39579 · Security Note
• https://dell.com/support/kbdoc/en-us/000228207/dsa-2024-346-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39579 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06838 · Security Note
• https://twitter.com/VulmonFeeds/status/1829835470068453596 · Twitter Post
• https://twitter.com/CVEnew/status/1829789028998107603 · Twitter Post
• https://vuldb.com/?id.276266 · Note
• https://t.me/cvenotify/93108 · Telegram Post
• https://t.me/cvedetector/4567 · Telegram Post
• https://t.me/cvenotify/92954 · Telegram Post