Vulnerability Database

299,184

Total vulnerabilities in the database

CVE-2024-25952

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering.

  • Published: Mar 28, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-25952
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6
  • AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

CWEs:

Software From Fixed in
dell / powerscale_onefs 9.5.0.0 9.5.0.8
dell / powerscale_onefs 9.6.1 9.7.0.2
dell / powerscale_onefs 9.4.0 9.4.0.16.x
dell / powerscale_onefs 8.2.2.0 9.3.0.x