Ga naar hoofdinhoud
Uitloggen

Welkom bij Dell

Mijn account
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.
Inloggen Een account maken Inloggen bij Premier Aanmelden voor partnerprogramma
Contact

Uw Dell.com-winkelwagentjes

Artikelnummer: 000207863

DSA-2023-001: Dell PowerScale OneFS Security Updates for Multiple Security Vulnerabilities

Samenvatting: Dell PowerScale remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

Article content

Impact

High

Gegevens

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2023-22575 Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user may potentially exploit this vulnerability, leading to information disclosure and escalation of privileges. 8.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-22574 Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs from the cluster may potentially exploit this vulnerability, leading to Information disclosure and denial of service. 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HThis hyperlink is taking you to a website outside of Dell Technologies. 
CVE-2023-22573 Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker may potentially exploit this vulnerability, leading to sensitive information disclosure. 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-22572 Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker may potentially exploit this vulnerability, leading to system takeover. 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H This hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2023-22575 Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user may potentially exploit this vulnerability, leading to information disclosure and escalation of privileges. 8.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:NThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-22574 Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs from the cluster may potentially exploit this vulnerability, leading to Information disclosure and denial of service. 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HThis hyperlink is taking you to a website outside of Dell Technologies. 
CVE-2023-22573 Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker may potentially exploit this vulnerability, leading to sensitive information disclosure. 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-22572 Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker may potentially exploit this vulnerability, leading to system takeover. 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2023-22575 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22574 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22573 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22572 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2023-22575 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22574 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22573 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area
CVE-2023-22572 PowerScale OneFS 9.1.0.0 through 9.1.0.26
9.2.1.0 through 9.2.1.19
9.4.0.0 through 9.4.0.10		 Download and install the latest RUP.
>= 9.1.0.27
>= 9.2.1.20
>= 9.4.0.11		 PowerScale OneFS Downloads Area
Any other version Upgrade your version of PowerScale OneFS. PowerScale OneFS Downloads Area

NOTE: All above CVEs are addressed in the newly released PowerScale OneFS version 9.5.0.0.

Revisiegeschiedenis

RevisionDateDescription
1.02023-01-31 Initial Release
2.02023-07-10Updated for enhanced presentation with no changes to content 

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische informatie

Artikeleigenschappen

Getroffen product

PowerScale OneFS

Datum laatst gepubliceerd

10 jul. 2023

Artikeltype

Dell Security Advisory

Terug naar boven