CVE Vulnerability

CVE-2022-34445

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.

4.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000205618/dsa-2022-271 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:dell:powerscale_onefs:9.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.3.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.2.1:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.1.1:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:8.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:8.2.1:*:*:*:*:*:*:*
Information

Published : 2023-02-11 01:23

Updated : 2023-02-21 05:23

NVD link : CVE-2022-34445

Mitre link : CVE-2022-34445

Products Affected
No products.
CWE
CWE-326

Inadequate Encryption Strength