Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise

  • Published: Feb 1, 2023
  • Updated: Nov 8, 2023
  • CVE: CVE-2022-45099
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
dell / emc_powerscale_onefs 9.2.1.0 9.2.1.18
dell / emc_powerscale_onefs 9.4.0.0 9.4.0.9
dell / emc_powerscale_onefs 9.1.0.0 9.1.0.24
dell / emc_powerscale_onefs 9.3.0.0 9.3.0.7