Dell PowerScale OneFS S3 cleartext storage of sensitive info (9.0-9.4)
CVE-2022-45098 Published on February 1, 2023
Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information vulnerability in S3 component. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure.
Vulnerability Analysis
CVE-2022-45098 is exploitable with local system access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
Products Associated with CVE-2022-45098
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-45098 are published in Dell Emc Powerscale Onefs:
Affected Versions
Dell PowerScale OneFS:- Version 9.0.0.x, <= 0.4.0.x is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.