High
Third-party Component | CVEs | More Information |
---|---|---|
OpenSSH | CVE-2024-6387 | https://nvd.nist.gov/vuln/detail/CVE-2024-6387 |
pyca/cryptography | CVE-2023-49083 | https://nvd.nist.gov/vuln/detail/CVE-2023-49083 |
Libexpat | CVE-2024-28757 CVE-2023-52425 CVE-2023-52426 |
See the NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
Python | CVE-2023-6597 CVE-2024-0450 |
See the NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
Apache HTTP Server | CVE-2023-38709 CVE-2024-24795 |
See the NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
Curl | CVE-2023-46218 CVE-2023-46219 |
See the NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
iPerf3 | CVE-2023-7250 | https://nvd.nist.gov/vuln/detail/CVE-2023-7250 |
Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
---|---|---|---|
CVE-2024-39579 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access. | 6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CVE-2024-39578 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering. | 6.3 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H |
Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
---|---|---|---|
CVE-2024-39579 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access. | 6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CVE-2024-39578 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering. | 6.3 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H |
CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
---|---|---|---|---|
CVE-2023-49083 | PowerScale OneFS | Versions 8.2.2.x through 9.4.0.18 | Version 9.4.0.19 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Version 8.2.2.x through 9.5.0.8 | Version 9.5.1.0 or later | PowerScale OneFS Downloads Area |
CVE-2024-6387 | PowerScale OneFS | Versions 9.1.0.x through 9.7.1.0 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-6597, CVE-2024-0450 | PowerScale OneFS | Versions 9.5.0.x through 9.5.0.8 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2024-39579, CVE-2023-6597, CVE-2024-0450, CVE-2024-39578, CVE-2023-38709, CVE-2024-24795, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Versions 8.2.2.x through 9.7.1.0 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2024-39579, CVE-2023-6597, CVE-2024-0450, CVE-2024-39578, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Versions 9.8.0.0 | Version 9.9.0.0 or later | PowerScale OneFS Downloads Area |
CVE-2024-6387, CVE-2023-38709, CVE-2024-24795 | PowerScale OneFS | Versions 9.8.0.0 through 9.8.0.1 | Version 9.9.0.0 or later | PowerScale OneFS Downloads Area |
CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
---|---|---|---|---|
CVE-2023-49083 | PowerScale OneFS | Versions 8.2.2.x through 9.4.0.18 | Version 9.4.0.19 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Version 8.2.2.x through 9.5.0.8 | Version 9.5.1.0 or later | PowerScale OneFS Downloads Area |
CVE-2024-6387 | PowerScale OneFS | Versions 9.1.0.x through 9.7.1.0 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-6597, CVE-2024-0450 | PowerScale OneFS | Versions 9.5.0.x through 9.5.0.8 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2024-39579, CVE-2023-6597, CVE-2024-0450, CVE-2024-39578, CVE-2023-38709, CVE-2024-24795, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Versions 8.2.2.x through 9.7.1.0 | Version 9.7.1.2 or later | PowerScale OneFS Downloads Area |
CVE-2023-49083, CVE-2024-28757, CVE-2023-52425, CVE-2023-52426, CVE-2024-39579, CVE-2023-6597, CVE-2024-0450, CVE-2024-39578, CVE-2023-46218, CVE-2023-46219, CVE-2023-7250 | PowerScale OneFS | Versions 9.8.0.0 | Version 9.9.0.0 or later | PowerScale OneFS Downloads Area |
CVE-2024-6387, CVE-2023-38709, CVE-2024-24795 | PowerScale OneFS | Versions 9.8.0.0 through 9.8.0.1 | Version 9.9.0.0 or later | PowerScale OneFS Downloads Area |
Revision | Date | Description |
---|---|---|
1.0 | 2024-08-30 | Initial Release |
2..0 | 2024-08-30 | Updated for enhanced presentation with no changes to content |