CVE-2023-32457 is a vulnerability in Dell Powerscale Onefs
Published on August 29, 2023
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.
Vulnerability Analysis
CVE-2023-32457 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2023-32457
You can be notified by stack.watch whenever vulnerabilities like CVE-2023-32457 are published in these products:
What versions of Powerscale Onefs are vulnerable to CVE-2023-32457?
- Dell Powerscale Onefs Version 9.5.0.0 through 9.5.0.3
- Dell Powerscale Onefs Version 9.4.0.0 through 9.4.0.13
- Dell Powerscale Onefs Version 9.2.1.0 through 9.2.1.22