CVE-2022-29098: High severity Dell PowerScale OneFS vulnerability
Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-29098?
CVE-2022-29098 is a vulnerability in Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x that allows an administrator to create an account with no password, potentially leading to a user account compromise.
How does CVE-2022-29098 affect Dell PowerScale OneFS?
CVE-2022-29098 affects Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, allowing an administrator to create an account with no password, which could be exploited by a remote attacker to compromise user accounts.
What is the severity of CVE-2022-29098?
CVE-2022-29098 has a severity rating of 7.5 (High).
How can I fix CVE-2022-29098?
To fix CVE-2022-29098, it is recommended to update Dell PowerScale OneFS to a version that addresses the weak password requirement vulnerability.
Where can I find more information about CVE-2022-29098?
More information about CVE-2022-29098 can be found in the Dell PowerScale OneFS security update advisory at the following link: [Dell PowerScale OneFS Security Update Advisory](https://www.dell.com/support/kbdoc/en-us/000200128/dsa-2022-082-dell-emc-powerscale-onefs-security-update?lang=en).