Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data.
The product creates a search index of private or sensitive documents, but it does not properly limit index access to actors who are authorized to see the original information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emc_powerscale_onefs | Dell | 8.2.0 (including) | 9.3.0 (including) |