Dell PowerScale OneFS Sensitive Information Log Injection Vulnerability

A vulnerability exists in Dell PowerScale OneFS versions prior to 9.12.0.0, allowing low-privileged attackers with local access to inject sensitive information into log files. This could lead to the disclosure of user credentials, which may be used to access the application with the privileges of the compromised account.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of user credentials, potentially allowing access to the application with the rights of the compromised user.

Remediation

Users can upgrade to Dell PowerScale OneFS versions 9.12.0.0 or later. For versions 9.5.0.0 through 9.10.1.2, the recommended version is 9.10.1.3 or later. Instructions for downloading the update are available in the PowerScale OneFS Downloads Area.