Dell PowerScale OneFS Cryptographic Algorithm Vulnerability Allowing Information Disclosure

A vulnerability exists in Dell PowerScale OneFS versions prior to 9.10.1.3 and in versions 9.11.0.0 through 9.12.0.0. This vulnerability involves the use of a broken or risky cryptographic algorithm. An unauthenticated attacker with remote access could exploit this issue, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to Dell PowerScale OneFS version 9.10.1.3 or later, or version 9.12.0.0 or later. For versions 9.11.0.0 through 9.12.0.0, users should upgrade to version 9.12.0.1 or later. The PowerScale OneFS Downloads Area is available for downloading the updated versions.