First published: Thu Nov 02 2023(Updated: )
Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exploit this vulnerability to cause information disclosure.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell PowerScale OneFS | >=8.2.0<=8.2.2 | |
Dell PowerScale OneFS | >=9.2.1<9.2.1.24 | |
Dell PowerScale OneFS | >=9.4<9.4.0.15 | |
Dell PowerScale OneFS | >=9.5<9.5.0.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-43087 is a vulnerability in Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x that allows a low privileged remote attacker to potentially disclose information due to improper handling of insufficient permissions.
The severity of CVE-2023-43087 is medium with a CVSS score of 6.5.
CVE-2023-43087 can impact Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x by allowing a low privileged remote attacker to potentially disclose information.
Yes, Dell has released security updates to address the vulnerability. It is recommended to update to the latest version of Dell PowerScale OneFS.
You can find more information about CVE-2023-43087 on Dell's website at https://www.dell.com/support/kbdoc/en-us/000218934/powerscale-onefs-security-updates-for-multiple-security-vulnerabilities.