Dell PowerScale OneFS Incorrect Privilege Assignment Vulnerability Allowing Privilege Escalation

A vulnerability allowing incorrect privilege assignment has been identified in Dell PowerScale OneFS. This issue affects versions prior to 9.10.1.6, as well as versions 9.11.0.0 through 9.12.0.1. The vulnerability could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges on the affected system.

Remediation

Users can upgrade to Dell PowerScale OneFS version 9.10.1.6 or later. For those using versions 9.11.0.0 through 9.12.0.1, the recommended upgrade is to version 9.13.0.0 or later. Instructions for downloading the update are available in the Dell PowerScale OneFS Downloads Area.