Vulnerabilities

TI-2024-26514 CVE-2024-39582 · GHSA-jh49-frp2-9886

Hard-coded credentials in Dell PowerScale InsightIQ

LOW 19

Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00146 Published 2024-09-10 No fix listed CWE-798

TI-2024-26506 CVE-2024-39574 · GHSA-wxh2-rq3c-2j2g

LOW 31

Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0014 Published 2024-09-10 No fix listed CWE-269

TI-2024-26512 CVE-2024-39580 · GHSA-mpv2-j6xc-wcp7

LOW 31

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00149 Published 2024-09-10 No fix listed CWE-284

TI-2024-26513 CVE-2024-39581 · GHSA-7294-67g5-cc6w

MEDIUM 48

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00398 Published 2024-09-10 No fix listed CWE-552

TI-2024-26515 CVE-2024-39583 · GHSA-x32q-36fr-233c

MEDIUM 43

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00295 Published 2024-09-10 No fix listed CWE-327