PT-2023-23825 · Dell · Dell Powerscale Onefs
CVE-2023-32491
·
Publicado
2023-08-16
·
Atualizado
2023-08-22
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Dell PowerScale OneFS version 9.5.0.x
Description
The issue concerns an insertion of sensitive information into log files, specifically related to SNMPv3. A user with low privileges could potentially exploit this, leading to information disclosure.
Recommendations
For Dell PowerScale OneFS version 9.5.0.x, consider restricting access to SNMPv3 functionality until a patch is available. As a temporary workaround, limit log file access to authorized personnel to minimize the risk of information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dell Powerscale Onefs