Dell PowerScale OneFS Insufficient Logging Vulnerability Allowing Information Tampering

A vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 prior to 9.5.1.6, 9.6.0.0 prior to 9.7.1.13, 9.8.0.0 prior to 9.10.1.5, and 9.11.0.0 prior to 9.12.0.1. This vulnerability stems from inadequate logging, which could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized modification of information.

Impact

Exploitation of this vulnerability could result in unauthorized information tampering.

Remediation

Users can upgrade to version 9.5.1.7 or later, 9.7.1.14 or later, 9.10.1.6 or later, or version 9.13.0.0 or later, depending on their current version. The Dell PowerScale OneFS Downloads Area is available for downloading the updated versions.