CVE Vulnerabilities

CVE-2022-45101

Improper Handling of Insufficient Privileges

Published: Feb 01, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution.

Weakness

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

Affected Software

NameVendorStart VersionEnd Version
Emc_powerscale_onefsDell9.1.0.0 (including)9.1.0.25 (excluding)
Emc_powerscale_onefsDell9.2.1.0 (including)9.2.1.18 (excluding)
Emc_powerscale_onefsDell9.4.0.0 (including)9.4.0.9 (excluding)

References