PT-2023-23825 · Dell · Dell Powerscale Onefs

CVE-2023-32491

·

Publicado

2023-08-16

·

Atualizado

2023-08-22

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS version 9.5.0.x
Description The issue concerns an insertion of sensitive information into log files, specifically related to SNMPv3. A user with low privileges could potentially exploit this, leading to information disclosure.
Recommendations For Dell PowerScale OneFS version 9.5.0.x, consider restricting access to SNMPv3 functionality until a patch is available. As a temporary workaround, limit log file access to authorized personnel to minimize the risk of information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-32491

Produtos afetados

Dell Powerscale Onefs