Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. This issue affects the availability of the system, making it a medium severity concern.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-25907 |
Exploitation
To exploit this vulnerability, an attacker would need to have remote access to the affected system. By triggering the account lockout mechanism excessively, the attacker could cause legitimate users to be locked out, resulting in a denial of service. The low attack complexity means that this can be done with minimal effort and without requiring special privileges.
Affected Products
- PowerScale OneFS 9.13.0.0: Contains the vulnerability that allows for denial of service through an overly restrictive account lockout mechanism.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Users should also review their account lockout policies and consider implementing additional security measures to prevent unauthorized access.