Vulnerabilities

TI-2022-22189 CVE-2022-45100 · GHSA-rcf2-vhwp-m3qr

Improper certificate validation in Dell PowerScale OneFS

MEDIUM 43

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00505 Published 2023-02-01 No fix listed CWE-295

TI-2022-22188 CVE-2022-45099 · GHSA-65q3-w6v4-65rm

LOW 35

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2023-02-01 No fix listed CWE-261

TI-2022-22186 CVE-2022-45097 · GHSA-vh68-cv68-mvfr

LOW 38

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00412 Published 2023-02-01 No fix listed CWE-842

TI-2022-22184 CVE-2022-45095 · GHSA-8gqj-v2ww-xm3p

LOW 33

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00637 Published 2023-02-01 No fix listed CWE-77