Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emc_powerscale_onefs | Dell | 9.1.0.0 (including) | 9.1.0.27 (excluding) |
| Emc_powerscale_onefs | Dell | 9.2.1.0 (including) | 9.2.1.20 (excluding) |
| Emc_powerscale_onefs | Dell | 9.4.0.0 (including) | 9.4.0.11 (excluding) |