Dell PowerScale OneFS Privilege Escalation Vulnerability

A vulnerability allowing unauthorized privilege escalation has been identified in Dell PowerScale OneFS. This issue affects versions prior to 9.10.1.6, as well as versions 9.11.0.0 through 9.12.0.1. The vulnerability arises from an execution with unnecessary privileges, which could be exploited by a high-privileged attacker with local access to elevate privileges on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a user to gain higher-level access or rights on the system than intended.

Remediation

Users can upgrade to version 9.10.1.6 or later, or to version 9.13.0.0 or later, depending on their current version. Instructions for downloading the update are available in the PowerScale OneFS Downloads Area.