by Kastro
Paper/Archive/CVE-2022-31229

CVE-2022-31229

Dell PowerScale OneFS — Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information.

EPSS 0.8%CVSS 9.6
critical.is priorityof 100
40
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 56.2.562 × 2011.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator could potentially exploit this vulnerability, leading to disclosure of sensitive information. This sensitive information can be used to access sensitive resources.

Affected

ProductAffectedFixed inSource
PowerScale OneFSunspecified – < 8.2.x, 9.0.0.x, 9.1.0.x, 9.1.1.x, 9.2.0.x, 9.2.1.x, 9.3.0.x8.2.x, 9.0.0.x, 9.1.0.x, 9.1.1.x, 9.2.0.x, 9.2.1.x, 9.3.0.xCNA

Scores by source

dell (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References

refdell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update?lang=en