Dell PowerScale OneFS Execution with Unnecessary Privileges Vulnerability Allowing Denial-of-Service, Privilege Escalation, and Information Disclosure

A vulnerability has been identified in Dell PowerScale OneFS versions prior to 9.10.1.6 and in the 9.11.0.0 to 9.12.0.1 range. This vulnerability allows a high-privileged attacker with local access to execute actions with unnecessary privileges, potentially leading to a denial-of-service condition, unauthorized elevation of privileges, and disclosure of sensitive information.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition, unauthorized elevation of privileges, and unauthorized information disclosure.

Remediation

Users can upgrade to Dell PowerScale OneFS version 9.10.1.6 or version 9.13.0.0 or later. Instructions for downloading the update are available in the PowerScale OneFS Downloads Area.