CVE-2022-22563

MEDIUM

Dell EMC Powerscale OneFS <9.2.x - Info Disclosure

Title source: llm

Description

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.

References (2)

Core 2

Core References

Permissions Required, Vendor Advisory x_refsource_misc

https://www.dell.com/support/kbdoc/000196657

Vendor Advisory

https://www.dell.com/support/kbdoc/en-an/000197991/dell-emc-powerscale-onefs-security-update-for-multiple-component-vulnerabilities

Scores

CVSS v3 4.4

EPSS 0.0004

EPSS Percentile 13.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-223

Status published

Products (1)

dell/emc_powerscale_onefs 8.2.0 - 9.3.0.0

Published Apr 08, 2022

Tracked Since Feb 18, 2026