Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access.
Weakness
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Powerscale_onefs | Dell | 8.2.2.0 (including) | 9.7.1.2 (excluding) |
| Powerscale_onefs | Dell | 9.8.0.0 (including) | 9.8.0.0 (including) |