Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS versions 9.5.0.0 through 9.11.0.0 contains a vulnerability that exposes sensitive information to unauthorized actors. An unauthenticated remote attacker could exploit this vulnerability, potentially leading to information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2025-36601 |
Exploitation
To exploit this vulnerability, an attacker would need to perform a remote attack over the network. Given the high attack complexity, the attacker must have specific conditions met to successfully exploit the vulnerability. If successful, the attacker could gain access to sensitive information without needing any privileges or user interaction.
Affected Products
- PowerScale OneFS 9.5.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.6.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.7.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.8.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.9.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.10.0.0 – Vulnerable to information disclosure.
- PowerScale OneFS 9.11.0.0 – Vulnerable to information disclosure.
Mitigation
To mitigate this vulnerability, users should update their Dell PowerScale OneFS to the latest version that addresses the security issue. Regularly applying security updates and patches is essential to protect against potential exploits.