CVE-2022-34445: Medium severity Dell PowerScale OneFS vulnerability
Published Feb 10, 2023
·Updated
Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.
Affected Software
18 affected components
Dell PowerScale OneFS=8.2.0
Dell PowerScale OneFS=8.2.1
Dell PowerScale OneFS=8.2.2
Dell PowerScale OneFS=9.0.0
Dell PowerScale OneFS=9.1.0
Dell PowerScale OneFS=9.1.1
Dell PowerScale OneFS=9.2.0
Dell PowerScale OneFS=9.2.1
Dell PowerScale OneFS=9.3.0
Dell PowerScale OneFS=8.2.0
Dell PowerScale OneFS=8.2.1
Dell PowerScale OneFS=8.2.2
Dell PowerScale OneFS=9.0.0
Dell PowerScale OneFS=9.1.0
Dell PowerScale OneFS=9.1.1
Dell PowerScale OneFS=9.2.0
Dell PowerScale OneFS=9.2.1
Dell PowerScale OneFS=9.3.0
Event History
Feb 10, 2023
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionSeverityWeakness
Feb 11, 2023
Data Sourced
via NVD·01:23 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Dell PowerScale OneFS vulnerability?
The vulnerability ID for this Dell PowerScale OneFS vulnerability is CVE-2022-34445.
2
What is the severity level of CVE-2022-34445?
The severity level of CVE-2022-34445 is medium, with a severity value of 4.4.
3
Which versions of Dell PowerScale OneFS are affected by CVE-2022-34445?
Dell PowerScale OneFS versions 8.2.x through 9.3.x are affected by CVE-2022-34445.
4
What is the impact of CVE-2022-34445?
CVE-2022-34445 may potentially lead to information disclosure if exploited by a malicious local privileged attacker.
5
Is there a fix available for CVE-2022-34445?
Yes, Dell has released a security advisory (DSA-2022-271) with guidance on how to mitigate the vulnerability.