Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS contains an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. This could allow unauthorized access to sensitive data and system controls.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2025-43722 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and possess high privileges. By leveraging the improper privilege management, the attacker can escalate their privileges, gaining unauthorized access to restricted areas of the system and potentially compromising sensitive information.
Affected Products
- PowerScale OneFS versions prior to 9.12.0.0 – vulnerable to improper privilege management leading to potential privilege escalation.
Mitigation
To mitigate this vulnerability, users should upgrade to PowerScale OneFS version 9.12.0.0 or later. Regularly applying security updates and monitoring access controls can help prevent unauthorized privilege escalation.