« Volver al listado

CVE-2024-25959

Estado: AnalizadaMedia (5.5)—

Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure, escalation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dell — Powerscale Onefs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-25959",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-25959",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-09T15:12:12.827681Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.9,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.3,
        "exploitabilityScore": 2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "PowerScale OneFS",
          "versions": [
            {
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.0.16"
            },
            {
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.0.7"
            },
            {
              "status": "affected",
              "version": "9.6.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.0"
            },
            {
              "status": "affected",
              "version": "9.7.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dell",
          "product": "powerscale_onefs",
          "versions": [
            {
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.0.16"
            },
            {
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.0.7"
            },
            {
              "status": "affected",
              "version": "9.6.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.0"
            },
            {
              "status": "affected",
              "version": "9.7.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-03-28T18:15:07.767",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000223366/dsa-2024-115-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000223366/dsa-2024-115-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure, escalation of privileges."
    },
    {
      "lang": "es",
      "value": "Dell PowerScale OneFS versiones 9.4.0.x a 9.7.0.x contiene una inserción de información confidencial en la vulnerabilidad del archivo de registro. Un atacante local con pocos privilegios podría explotar esta vulnerabilidad, lo que provocaría la divulgación de información confidencial y una escalada de privilegios."
    }
  ],
  "lastModified": "2026-06-17T07:16:48.177",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C862453-5205-411D-9424-4F4131CAC781",
              "versionEndExcluding": "9.4.0.17",
              "versionStartIncluding": "9.4.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "109CCE2D-43A1-475C-9A10-0639BFFCC2B4",
              "versionEndExcluding": "9.5.0.8",
              "versionStartIncluding": "9.5.0.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27B5684D-3376-4E78-BA09-C7E1CFB7578B",
              "versionEndExcluding": "9.7.0.2",
              "versionStartIncluding": "9.6.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}