Dell PowerScale OneFS Incorrect Authorization Vulnerability Allowing Access to Disabled User Privileges

An incorrect authorization vulnerability has been identified in Dell PowerScale OneFS versions 9.4.0.0 through 9.10.0.1. This vulnerability allows an unauthenticated attacker with local access to exploit the system and gain access to the cluster using the previous privileges of a disabled user account.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cluster resources and privileges, potentially allowing for further actions within the system that could be harmful or disruptive.

Remediation

Users can upgrade to Dell PowerScale OneFS version 9.10.1.1 or later. For more information on downloading the update, visit the PowerScale OneFS Downloads Area.