CVEvulnerability

CVE-2024-24901

2.3 LOW Published 2024-03-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.0 LOW — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
CVSS 3.1 ([email protected])
2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-778

Description

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period.

Affected configurations

• dell powerscale onefs (>= 8.2.0 < 9.2.1.25) • dell powerscale onefs (>= 9.3.0.0 < 9.4.0.17) • dell powerscale onefs (>= 9.5.0.0 < 9.5.0.7) • dell powerscale onefs 9.6.1

Related

Weakness · CWE (1)

  • CWE-778 Insufficient Logging weakness

References