Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-32803 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the logging mechanisms of the affected PowerScale OneFS versions. By executing specific commands or actions, the attacker can alter log entries, which may lead to undetected information tampering.
Affected Products
- PowerScale OneFS 9.5.0.0 to 9.5.1.6
- PowerScale OneFS 9.6.0.0 to 9.7.1.13
- PowerScale OneFS 9.8.0.0 to 9.10.1.5
- PowerScale OneFS 9.11.0.0 to 9.12.0.1
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of PowerScale OneFS that addresses the insufficient logging issue. Regularly reviewing and monitoring logs can also help detect any unauthorized changes.