Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive information vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2026-24511 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can trigger the error message generation process. By carefully analyzing the output, the attacker may gain access to sensitive information that should not be disclosed, thereby compromising the confidentiality of the system.
Affected Products
- PowerScale OneFS versions 9.5.0.0 to 9.10.1.6: Contains the vulnerability allowing sensitive information disclosure.
- PowerScale OneFS versions 9.11.0.0 to 9.13.0.0: Also affected by the same vulnerability, enabling potential information leaks.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of Dell PowerScale OneFS that addresses this issue. Regularly applying security updates and monitoring for unusual access patterns can also help reduce the risk of exploitation.