Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering. This could allow attackers to manipulate data without detection.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-22279 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected system. By leveraging this access, the attacker can manipulate logs or data due to the insufficient logging mechanisms in place. This exploitation requires no authentication, making it easier for malicious actors to carry out their attacks.
Affected Products
- PowerScale OneFS: Versions prior to 9.13.0.0 are affected by this vulnerability.
Mitigation
To mitigate this vulnerability, users should upgrade to PowerScale OneFS version 9.13.0.0 or later. Additionally, implementing strict access controls and monitoring for unauthorized access can help reduce the risk of exploitation.