CVE-2022-45098

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-45098

CWE

https://cwe.mitre.org/data/definitions/532.html

Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information vulnerability in S3 component. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name	Vendor	Start Version	End Version
Emc_powerscale_onefs	Dell	9.1.0.0 (including)	9.1.0.25 (excluding)
Emc_powerscale_onefs	Dell	9.2.1.0 (including)	9.2.1.18 (excluding)
Emc_powerscale_onefs	Dell	9.4.0.0 (including)	9.4.0.9 (excluding)

Potential Mitigations

https://cwe.mitre.org/data/definitions/215.html

References

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

Insertion of Sensitive Information into Log File

Weakness

Affected Software

Potential Mitigations

Related Attack Patterns

References